The remote host is affected by the vulnerability described in GLSA-200510-21 (phpMyAdmin: Local file inclusion and XSS vulnerabilities)

    Stefan Esser discovered that by calling certain PHP files directly, it     was possible to workaround the grab_globals.lib.php security model and     overwrite the $cfg configuration array. Systems running PHP in safe     mode are not affected. Futhermore, Tobias Klein reported several     cross-site-scripting issues resulting from insufficient user input     sanitizing.
  Impact :

    A local attacker may exploit this vulnerability by sending malicious     requests, causing the execution of arbitrary code with the rights of     the user running the web server. Furthermore, the cross-site scripting     issues give a remote attacker the ability to inject and execute     malicious script code or to steal cookie-based authentication     credentials, potentially compromising the victim's browser.
  Workaround :

    There is no known workaround for all those issues at this time.

The version of phpMyAdmin installed on the remote host is affected by a local file inclusion vulnerability that can be exploited by an unauthenticated attacker to read arbitrary files, and possibly even to execute arbitrary PHP code on the affected host subject to the permissions of the web server user id.

In addition, the application fails to sanitize user-supplied input to the 'hash' parameter in the 'left.php' and 'queryframe.php' scripts as well as the 'sort_order' and 'sort_by' parameters in the 'server_databases.php' script before using it to generate dynamic HTML, which can lead to cross-site scripting attacks against the affected application.

Several cross-site scripting vulnerabilities have been discovered in phpmyadmin, a set of PHP-scripts to administrate MySQL over the WWW.
The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-2869     Andreas Kerber and Michal Cihar discovered several     cross-site scripting vulnerabilities in the error page     and in the cookie login.

  - CVE-2005-3300     Stefan Esser discovered missing safety checks in     grab_globals.php that could allow an attacker to induce     phpmyadmin to include an arbitrary local file.

  - CVE-2005-3301     Tobias Klein discovered several cross-site scripting     vulnerabilities that could allow attackers to inject     arbitrary HTML or client-side scripting.

The version in the old stable distribution (woody) has probably its own flaws and is not easily fixable without a full audit and patch session. The easier way is to upgrade it from woody to sarge.

リモートホストにインストールされているphpMyAdminのバージョンは、ローカルファイルインクルージョンの脆弱性の影響を受けます。認証されていない攻撃者がこれを悪用し、任意のファイルを読み取ったり、WebサーバーユーザーIDの権限の影響を受けるホストで任意のPHPコードを実行したりする可能性もあります。

さらに、アプリケーションは、 スクリプトを使用して動的HTMLを生成する前に、「left.php」および「queryframe.php」スクリプトの「hash」パラメーター、ならびに「server_databases.php」スクリプトの「sort_order」および「sort_by」パラメーターへのユーザー指定の入力のサニタイズに失敗します。これにより、影響を受けるアプリケーションに対してクロスサイトスクリプティング攻撃を引き起こす可能性があります。

遠端主機上安裝的 phpMyAdmin 版本受到一個本機檔案引入弱點影響，未經驗證的攻擊者可利用該弱點讀取任意檔案，甚至可能在受影響的主機上以 Web 伺服器使用者 ID 的權限執行任意 PHP 程式碼。

此外，應用程式未清理「left.php」和「queryframe.php」指令碼中的「hash」參數，以及「server_databases.php」中的「sort_order」和「sort_by」參數的使用者輸入資料，便將之用於產生動態 HTML，這可導致攻擊者對受影響的應用程式發動跨網站指令碼攻擊。

Versions of phpMyAdmin prior to 2.6.4-pl3 contain a flaw that allows attackers to read arbitrary files because of its failure to sanitize the parameter 'usesubform' before using it in several scripts.

The remote host is running a version of Mac OS X 10.4 that is older than version 10.4.8.  Mac OS X 10.4.8 contains several security fixes for the following programs :
 - CFNetwork
 - Flash Player
 - ImageIO
 - Kernel
 - LoginWindow
 - Preferences
 - QuickDraw Manager
 - SASL
 - WebCore
 - Workgroup Manager

ID	名前	製品	ファミリー	公開日	更新日	深刻度
20103	GLSA-200510-21 : phpMyAdmin: Local file inclusion and XSS vulnerabilities	Nessus	Gentoo Local Security Checks	2005/10/28	2021/1/6	medium
20088	phpMyAdmin < 2.6.4-pl3 Multiple Vulnerabilities	Nessus	CGI abuses	2005/10/26	2022/4/11	medium
22746	Debian DSA-880-1 : phpmyadmin - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
20088	phpMyAdmin < 2.6.4-pl3の複数の脆弱性	Nessus	CGI abuses	2005/10/26	2022/4/11	medium
20088	phpMyAdmin < 2.6.4-pl3 多個弱點	Nessus	CGI abuses	2005/10/26	2022/4/11	medium
3252	phpMyAdmin < 2.6.4-pl3 'usesubform' Parameter Remote File Inclusion	Nessus Network Monitor	CGI	2005/10/11	2019/3/6	medium
3757	Mac OS X < 10.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2006/9/30	2019/3/6	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium