CVE-2011-2508

2011-07-1400:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

0.22

Percentile

96.5%

JSON

Directory traversal vulnerability in libraries/display_tbl.lib.php in
phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain
MIME transformation feature is enabled, allows remote authenticated users
to include and execute arbitrary local files via a … (dot dot) in a
GLOBALS[mime_map][$meta->name][transformation] parameter.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/phpmyadmin/+bug/806788>

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchphpmyadmin< 4:3.4.3.1-1UNKNOWN
ubuntu12.04noarchphpmyadmin< 4:3.4.3.1-1UNKNOWN
ubuntu12.10noarchphpmyadmin< 4:3.4.3.1-1UNKNOWN
ubuntu13.04noarchphpmyadmin< 4:3.4.3.1-1UNKNOWN
ubuntu13.10noarchphpmyadmin< 4:3.4.3.1-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.10	noarch	phpmyadmin	< 4:3.4.3.1-1	UNKNOWN
ubuntu	12.04	noarch	phpmyadmin	< 4:3.4.3.1-1	UNKNOWN
ubuntu	12.10	noarch	phpmyadmin	< 4:3.4.3.1-1	UNKNOWN
ubuntu	13.04	noarch	phpmyadmin	< 4:3.4.3.1-1	UNKNOWN
ubuntu	13.10	noarch	phpmyadmin	< 4:3.4.3.1-1	UNKNOWN