Vulnerabilities > CVE-2005-4079 - Unspecified vulnerability in PHPmyadmin 2.7.0Rc1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
phpmyadmin
nessus
NVD
Published: 2005-12-08
Updated: 2018-10-19

Summary

The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables.

Vulnerable Configurations

Part Description Count
Application
Phpmyadmin
1

Nessus

  • NASL familySuSE Local Security Checks
    NASL idSUSE_SA_2006_004.NASL
    descriptionThe remote host is missing the patch for the advisory SUSE-SA:2006:004 (phpMyAdmin). Stefan Esser discovered a bug in in the register_globals emulation of phpMyAdmin that allowes to overwrite variables. An attacker could exploit the bug to ultimately execute code (CVE-2005-4079). Additionally several cross-site-scripting bugs were discovered (CVE-2005-3787, CVE-2005-3665). We have released a version update to phpMyAdmin-2.7.0-pl2 which addresses the issues mentioned above.
    last seen2019-10-28
    modified2006-01-29
    plugin id20820
    published2006-01-29
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/20820
    titleSUSE-SA:2006:004: phpMyAdmin
  • NASL familyCGI abuses
    NASL idPHPMYADMIN_IMPORT_BLACKLIST_OVERWRITE.NASL
    descriptionThe version of phpMyAdmin installed on the remote host fails to properly protect the global
    last seen2020-06-01
    modified2020-06-02
    plugin id22124
    published2006-07-31
    reporterThis script is Copyright (C) 2006-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/22124
    titlephpMyAdmin import_blacklist Variable Overwriting
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-200512-03.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-200512-03 (phpMyAdmin: Multiple vulnerabilities) Stefan Esser from Hardened-PHP reported about multiple vulnerabilties found in phpMyAdmin. The $GLOBALS variable allows modifying the global variable import_blacklist to open phpMyAdmin to local and remote file inclusion, depending on your PHP version (CVE-2005-4079, PMASA-2005-9). Furthermore, it is also possible to conduct an XSS attack via the $HTTP_HOST variable and a local and remote file inclusion because the contents of the variable are under total control of the attacker (CVE-2005-3665, PMASA-2005-8). Impact : A remote attacker may exploit these vulnerabilities by sending malicious requests, causing the execution of arbitrary code with the rights of the user running the web server. The cross-site scripting issues allow a remote attacker to inject and execute malicious script code or to steal cookie-based authentication credentials, potentially allowing unauthorized access to phpMyAdmin. Workaround : There is no known workaround at this time.
    last seen2020-06-01
    modified2020-06-02
    plugin id20312
    published2005-12-15
    reporterThis script is Copyright (C) 2005-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/20312
    titleGLSA-200512-03 : phpMyAdmin: Multiple vulnerabilities

Seebug

bulletinFamilyexploit
descriptionBugCVE: CVE-2005-4079 BUGTRAQ: 15761 phpMyAdmin对某些变量的处理上存在漏洞，远程攻击者可能利用此漏洞在主机上执行任意命令。 phpMyAdmin将不应该被register_globals仿真层覆盖的变量黑名单存储在全局变量中，但却没有包含$import_blacklist变量名，因此攻击者可以覆盖该变量。如果覆盖了该变量的话，攻击者就可以用任意内容覆盖$GLOBALS数组，导致执行任意代码。 phpMyAdmin phpMyAdmin 2.7/2.7.0 beta1 phpMyAdmin ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： <a href=http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.7.0-pl1.tar.gz target=_blank>http://prdownloads.sourceforge.net/phpmyadmin/phpMyAdmin-2.7.0-pl1.tar.gz</a> Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200512-03）以及相应补丁: GLSA-200512-03：phpMyAdmin: Multiple vulnerabilities 链接：<a href=http://security.gentoo.org/glsa/glsa-200512-03.xml target=_blank>http://security.gentoo.org/glsa/glsa-200512-03.xml</a> 所有phpMyAdmin用户都应升级到最新版本: # emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.7.0_p1"
idSSV:4335
last seen2017-11-19
modified2008-10-26
published2008-10-26
reporterRoot
titlephpMyAdmin Import_Blacklist变量覆盖漏洞

References