phpMyAdmin HTTP Response Splitting Vulnerability in phpmyadmin/phpmyadmin
Summary
CVE-2009-1149: phpMyAdmin HTTP Response Splitting Vulnerability. Affects phpmyadmin/phpmyadmin versions < 3.1.3.1. Fixed in 3.1.3.1. How to fix ↓
Also tracked for
- phpmyadmin · Debian:11
The same CVE-2009-1149 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular open-source tool written in PHP that is used for managing MySQL databases. It provides a web-based interface for performing various database administration tasks. The vulnerability affects the BLOB streaming feature in phpMyAdmin versions before 3.1.3.1. This feature allows users to stream BLOB data from the database. However, due to a CRLF injection vulnerability in the 'bs_disp_as_mime_type.php' script, remote attackers can inject arbitrary HTTP headers and conduct HTTP response splitting attacks by manipulating the 'c_type' and 'file_type' parameters.
Vulnerability Detail
The CRLF injection vulnerability in phpMyAdmin allows attackers to manipulate the HTTP headers and perform HTTP response splitting attacks. By injecting malicious headers, an attacker can control the content of the server's response, potentially leading to various security issues such as cross-site scripting (XSS) attacks, cache poisoning, and session hijacking. This vulnerability has a high severity rating and is classified under CWE-113 (Improper Neutralization of CRLF Sequences in HTTP Headers) and CWE-20 (Improper Input Validation).
How To Fix
Minimum fixed version
3.1.3.1
This is the first release that contains the fix.
composer require phpmyadmin/phpmyadmin:3.1.3.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately possible, a temporary workaround is to disable the BLOB streaming feature in phpMyAdmin. This can be done by modifying the configuration file or disabling the feature through the phpMyAdmin interface. By disabling the feature, the vulnerable script will not be accessible, reducing the risk of exploitation.
Conclusion
The phpMyAdmin HTTP Response Splitting Vulnerability in the phpmyadmin/phpmyadmin package can allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. It is crucial to upgrade to the latest version of phpMyAdmin or disable the BLOB streaming feature to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is an open-source tool used for managing MySQL databases. It provides a web-based interface for performing various database administration tasks.
The BLOB streaming feature in phpMyAdmin allows users to stream BLOB data from the database. It is used for handling large binary objects in the database.
A CRLF injection vulnerability allows an attacker to inject arbitrary HTTP headers by manipulating the CRLF (Carriage Return Line Feed) characters. This can lead to various security issues, including HTTP response splitting attacks.
The vulnerability can be exploited to perform HTTP response splitting attacks, which can lead to cross-site scripting (XSS) attacks, cache poisoning, and session hijacking. It is important to patch the vulnerability to prevent these security risks.
To fix this vulnerability, it is recommended to upgrade phpMyAdmin to version 3.1.3.1 or later. This version includes a fix for the CRLF injection vulnerability. Alternatively, you can disable the BLOB streaming feature as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
