Wind River Support Network

HomeDefectsLIN8-5339
Fixed

LIN8-5339 : Security Advisory - phpmyadmin - CVE-2016-6613

Created: Dec 15, 2016    Updated: Dec 3, 2018
Resolved Date: Dec 21, 2016
Found In Version: 8.0.0.11
Fix Version: 8.0.0.13
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6613

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube