DSA-2975-1 phpmyadmin -- security update

Debian Security Advisory

DSA-2975-1 phpmyadmin -- security update

Date Reported:

09 Jul 2014

Affected Packages:

phpmyadmin

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2013-4995, CVE-2013-4996, CVE-2013-5002, CVE-2013-5003, CVE-2014-1879.

More information:

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems:

• CVE-2013-4995

  Authenticated users could inject arbitrary web script or HTML via a crafted SQL query.

• CVE-2013-4996

  Cross site scripting was possible via a crafted logo URL in the navigation panel or a crafted entry in the Trusted Proxies list.

• CVE-2013-5002

  Authenticated users could inject arbitrary web script or HTML via a crafted pageNumber value in Schema Export.

• CVE-2013-5003

  Authenticated users could execute arbitrary SQL commands as the phpMyAdmin control user via the scale parameter PMD PDF export and the pdf_page_number parameter in Schema Export.

• CVE-2014-1879

  Authenticated users could inject arbitrary web script or HTML via a crafted file name in the Import function.

For the stable distribution (wheezy), these problems have been fixed in version 4:3.4.11.1-2+deb7u1.

For the unstable distribution (sid), these problems have been fixed in version 4:4.2.5-1.

We recommend that you upgrade your phpmyadmin packages.