Wind River Support Network

HomeDefectsLIN8-5355
Fixed

LIN8-5355 : Security Advisory - phpmyadmin - CVE-2016-9849

Created: Dec 15, 2016    Updated: Dec 3, 2018
Resolved Date: Dec 25, 2016
Found In Version: 8.0.0.11
Fix Version: 8.0.0.13
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9849

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube