BID:11391

phpMyAdmin Remote Command Execution Vulnerability

Info

phpMyAdmin Remote Command Execution Vulnerability

Bugtraq ID:	11391
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 13 2004 12:00AM
Updated:	Oct 13 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	phpMyAdmin phpMyAdmin 2.6 .0pl1 phpMyAdmin phpMyAdmin 2.5.7 pl1 phpMyAdmin phpMyAdmin 2.5.7 phpMyAdmin phpMyAdmin 2.5.6 -rc1 phpMyAdmin phpMyAdmin 2.5.5 pl1 phpMyAdmin phpMyAdmin 2.5.5 -rc2 phpMyAdmin phpMyAdmin 2.5.5 -rc1 phpMyAdmin phpMyAdmin 2.5.5 phpMyAdmin phpMyAdmin 2.5.4 phpMyAdmin phpMyAdmin 2.5.2 phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.5 .0 phpMyAdmin phpMyAdmin 2.4 .0 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.2 rc3 phpMyAdmin phpMyAdmin 2.2 rc2 phpMyAdmin phpMyAdmin 2.2 rc1 phpMyAdmin phpMyAdmin 2.2 pre2 phpMyAdmin phpMyAdmin 2.2 pre1 phpMyAdmin phpMyAdmin 2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 - Debian Linux 2.2 - Debian Linux 2.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 6.2 - Redhat Linux 6.2 - Redhat Linux 6.2 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.6 - Sun Solaris 2.6 - SuSE Linux 7.1 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 6.4 - SuSE Linux 6.4 - SuSE Linux 6.4 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0

Not Vulnerable:	phpMyAdmin phpMyAdmin 2.6 .0pl2 + Gentoo Linux 1.4 + Gentoo Linux + Gentoo Linux + Gentoo Linux

Discussion

phpMyAdmin Remote Command Execution Vulnerability

phpMyAdmin is reported prone to a remote command execution vulnerability. This vulnerability likely arises due to insufficient sanitization of user-supplied data.

A successful attack may allow an attacker to execute arbitrary commands on a vulnerable server resulting in a compromise of the server.

phpMyAdmin 2.6.0-pl1 and prior versions are affected by this issue.

Exploit / POC

phpMyAdmin Remote Command Execution Vulnerability

An exploit is not required to leverage this issue.

Solution / Fix

phpMyAdmin Remote Command Execution Vulnerability

Solution:
Gentoo Linux has released advisory GLSA 200410-14 dealing with this issue. They have advised that all phpMyAdmin users should upgrade to the latest version:

# emerge sync

# emerge -pv ">=dev-db/phpmyadmin-2.6.0_p2"
# emerge ">=dev-db/phpmyadmin-2.6.0_p2"

Please see the referenced Gentoo advisory for more information.

The vendor has released phpMyAdmin 2.6.0 pl2 to address this issue.

phpMyAdmin phpMyAdmin 2.0