----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
phpMyAdmin Multiple Security Issues

SECUNIA ADVISORY ID:
SA38211

VERIFY ADVISORY:
http://secunia.com/advisories/38211/

DESCRIPTION:
Some security issues have been reported in phpMyAdmin, which can be
exploited by malicious users to manipulate certain data and
potentially perform certain actions with escalated privileges, and by
malicious people to bypass certain security restrictions.

1) The application creates the temporary directory with
world-writable permissions, which can be exploited to modify files.

2) The application creates temporary files with a predictable file
name, which potentially can be exploited to perform certain actions
with escalated privileges via symlink attacks.

3) Certain input passed to the scripts/setup.php script is used in a
call to the "unserialize()" function.

The security issues are reported in versions prior to 2.11.10.

SOLUTION:
Update to version 2.11.10. Also fixed in version 3.0.0 or later.
http://www.phpmyadmin.net/home_page/downloads.php

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) Thomas Biege and Sebastian Krahmer
2, 3) Thijs Kinkhorst

ORIGINAL ADVISORY:
http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.php
http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php
http://www.phpmyadmin.net/home_page/security/PMASA-2010-3.php

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------