Wind River Support Network

HomeDefectsLIN6-12141
Fixed

LIN6-12141 : Security Advisory - phpmyadmin - CVE-2016-9849

Created: Dec 15, 2016    Updated: Dec 3, 2018
Resolved Date: Dec 27, 2016
Found In Version: 6.0.0.31
Fix Version: 6.0.0.32
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9849

Other Downloads


Live chat
Online