Detections
Analytics

FreeBSD : phpmyadmin -- command execution vulnerability (0ff0e9a6-4ee0-11d9-a9e7-0001020eed82)

critical Nessus Plugin ID 18842

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

A phpMyAdmin security announcement reports :

Command execution: since phpMyAdmin 2.6.0-pl2, on a system where external MIME-based transformations are activated, an attacker can put into MySQL data an offensive value that starts a shell command when browsed.

Enabling PHP safe mode on the server can be used as a workaround for this vulnerability.

Solution

Update the affected package.

See Also

https://www.phpmyadmin.net/security/PMASA-2004-4/

http://www.nessus.org/u?8c2304be

http://www.nessus.org/u?a10b2b67

Plugin Details

Severity: Critical

ID: 18842

File Name: freebsd_pkg_0ff0e9a64ee011d9a9e70001020eed82.nasl

Version: 1.17

Type: local

Published: 7/13/2005

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:phpmyadmin, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 12/15/2004

Vulnerability Publication Date: 12/13/2004

Reference Information

CVE: CVE-2004-1147