CVE-2008-7251 libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin | = 2.11.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0-beta1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0beta1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin | = 2.11.5-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.7 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.7.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.8 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.3 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.4 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.5 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.6 | No fix listed |
| debian/phpmyadmin(Debian:12) | < 4:3.0.0-1 | 4:3.0.0-1 |
| debian/phpmyadmin(Debian:13) | < 4:3.0.0-1 | 4:3.0.0-1 |
| debian/phpmyadmin(Debian:14) | < 4:3.0.0-1 | 4:3.0.0-1 |
References
- SUSE-SR:2010:001 vendor-advisory
- phpmyadmin.svn.sourceforge.net
- phpmyadmin.svn.sourceforge.net
- 38211 third-party-advisory vendor-advisory
- 39503 third-party-advisory vendor-advisory
- DSA-2034 vendor-advisory
- www.phpmyadmin.net vendor-advisory
- 37826 vdb-entry
- ADV-2010-0910 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2008-7251 vendor-advisory