phpMyAdmin CVE-2015-2206 Information Disclosure Vulnerability

Bugtraq ID:	72949
Class:	Design Error
CVE:	CVE-2015-2206
Remote:	Yes
Local:	No
Published:	Mar 04 2015 12:00AM
Updated:	Dec 08 2015 10:02PM
Credit:	Jian Jiang and Xiaofeng Zheng
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

phpMyAdmin CVE-2015-2206 Information Disclosure Vulnerability

phpMyAdmin is prone to an information-disclosure vulnerability.

A man-in-the-middle attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

phpMyAdmin CVE-2015-2206 Information Disclosure Vulnerability

Attackers can use readily available tools to exploit this issue.

phpMyAdmin CVE-2015-2206 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva phpmyadmin-4.2.13.2-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva phpseclib-0.3.10-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/

phpMyAdmin CVE-2015-2206 Information Disclosure Vulnerability

References:

• phpMyAdmin Homepage (phpMyAdmin)
  
• PMASA-2015-1 (phpMyAdmin)