PHPMyAdmin Information Disclosure Vulnerability

Bugtraq ID:	7963
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 18 2003 12:00AM
Updated:	Jun 18 2003 12:00AM
Credit:	Discovery of these vulnerabilities credited to Lorenzo Manuel Hernandez Garcia-Hierro <[email protected]>.
Vulnerable:	phpMyAdmin phpMyAdmin 2.4 .0 phpMyAdmin phpMyAdmin 2.3.2 phpMyAdmin phpMyAdmin 2.3.1 phpMyAdmin phpMyAdmin 2.2.6 phpMyAdmin phpMyAdmin 2.2.5 phpMyAdmin phpMyAdmin 2.2.4 phpMyAdmin phpMyAdmin 2.2.3 phpMyAdmin phpMyAdmin 2.2.2 phpMyAdmin phpMyAdmin 2.1 .2 phpMyAdmin phpMyAdmin 2.1 .1 phpMyAdmin phpMyAdmin 2.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 - Debian Linux 2.2 - Debian Linux 2.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - FreeBSD FreeBSD 3.5.1 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - Mandriva Linux Mandrake 7.0 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - OpenBSD OpenBSD 2.6 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 6.2 - Redhat Linux 6.2 - Redhat Linux 6.2 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.6 - Sun Solaris 2.6 - SuSE Linux 7.1 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 7.0 - SuSE Linux 6.4 - SuSE Linux 6.4 - SuSE Linux 6.4 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0
Not Vulnerable:	phpMyAdmin phpMyAdmin 2.5.1 phpMyAdmin phpMyAdmin 2.5 .0

PHPMyAdmin Information Disclosure Vulnerability

A vulnerability has been reported for phpMyAdmin that may reveal the contents of directories to remote attackers. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, dot-dot-slash '../' directory traversal sequences are not sufficiently sanitized from URI parameters.

PHPMyAdmin Information Disclosure Vulnerability

The following proof of concept was provided:

http://localhost/mysql/db_details_importdocsql.php?submit_show=true&
do=import&docpath=[../../../]

PHPMyAdmin Information Disclosure Vulnerability

Solution:
This issue has been addressed as of phpMyAdmin 2.5.0. Users should upgrade to this version or later.


phpMyAdmin phpMyAdmin 2.0

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.0.1

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.0.2

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.0.3

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.0.4

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.0.5

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.1 .2

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.1

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.1 .1

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.2.2

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.2.3

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.2.4

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.2.5

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.2.6

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.3.1

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.3.2

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/

phpMyAdmin phpMyAdmin 2.4 .0

• phpMyAdmin phpMyAdmin 2.5.1
  http://www.phpmyadmin.net/