SUSE-SA:2006:004: phpMyAdmin

Medium Nessus Plugin ID 20820


The remote host is missing a vendor-supplied security patch


The remote host is missing the patch for the advisory SUSE-SA:2006:004 (phpMyAdmin).

Stefan Esser discovered a bug in in the register_globals emulation of phpMyAdmin that allowes to overwrite variables. An attacker could exploit the bug to ultimately execute code (CVE-2005-4079).
Additionally several cross-site-scripting bugs were discovered (CVE-2005-3787, CVE-2005-3665).

We have released a version update to phpMyAdmin-2.7.0-pl2 which addresses the issues mentioned above.


Plugin Details

Severity: Medium

ID: 20820

File Name: suse_SA_2006_004.nasl

Version: $Revision: 1.4 $

Agent: unix

Published: 2006/01/29

Dependencies: 12634

Risk Information

Risk Factor: Medium

Vulnerability Information

Required KB Items: Host/SuSE/rpm-list