openSUSE Security Update : phpMyAdmin (openSUSE-2012-18)

Medium Nessus Plugin ID 74585


The remote openSUSE host is missing a security update.


- update to 3.4.9

- bug #3442028 [edit] Inline editing enum fields with null shows no dropdown

- bug #3442004 [interface] DB suggestion not correct for user with underscore

- bug #3438420 [core] Magic quotes removed in PHP 5.4

- bug #3398788 [session] No feedback when result is empty (signon auth_type)

- bug #3384035 [display] Problems regarding ShowTooltipAliasTB

- bug #3306875 [edit] Can't rename a database that contains views

- bug #3452506 [edit] Unable to move tables with triggers

- bug #3449659 [navi] Fast filter broken with table tree

- bug #3448485 [GUI] Firefox favicon frameset regression

- [core] Better compatibility with mysql extension

- [security] Self-XSS on export options (export server/database/table), see PMASA-2011-20

- [security] Self-XSS in setup (host parameter), see PMASA-2011-19

- fix for bnc#738411

- PMASA-2011-19 (CVE-2011-4780)

- PMASA-2011-20 (CVE-2011-4782)

- rework config patch


Update the affected phpMyAdmin package.

See Also

Plugin Details

Severity: Medium

ID: 74585

File Name: openSUSE-2012-18.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2014/06/13

Modified: 2014/06/13

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:phpMyAdmin, cpe:/o:novell:opensuse:12.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 2012/01/04

Reference Information

CVE: CVE-2011-4780, CVE-2011-4782