Critical Vulnerability in phpMyAdmin: Null Byte Username Bypass
Summary
ALPINE-CVE-2016-9849: An issue was discovered in phpMyAdmin. Affects phpmyadmin versions < 4.4.15.9-r0. Fixed in 4.4.15.9-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely used open-source tool for managing MySQL databases through a web interface. It provides a user-friendly way to perform database operations, including creating, modifying, and deleting databases and tables. However, certain versions of phpMyAdmin are vulnerable to a security issue that allows attackers to bypass restrictions on root access by exploiting a Null Byte in the username.
Vulnerability Detail
The vulnerability identified as CVE-2016-9849 allows an attacker to bypass the AllowRoot restriction in phpMyAdmin by using a Null Byte in the username. This means that even if the configuration is set to deny root access, an attacker can gain unauthorized access to the database. This vulnerability affects all versions of phpMyAdmin from 4.6.x (prior to 4.6.5), 4.4.x (prior to 4.4.15.9), and 4.0.x (prior to 4.0.10.18). The potential ramifications include unauthorized access to sensitive database information, which could lead to data breaches or loss of data integrity.
How To Fix
Minimum fixed version
4.4.15.9-r0
This is the first release that contains the fix.
sudo apk add --upgrade phpmyadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling root access in phpMyAdmin until the software can be updated. This can be done by ensuring that the configuration setting $cfg['Servers'][$i]['AllowRoot'] is set to false.
Conclusion
The vulnerability CVE-2016-9849 in phpMyAdmin poses a significant risk by allowing unauthorized access through a Null Byte in the username. It is crucial for users to update to the latest patched versions to mitigate this risk and protect sensitive database information.
See every vulnerability recorded for phpmyadmin →
FAQ
CVE-2016-9849 is a vulnerability in phpMyAdmin that allows attackers to bypass root access restrictions using a Null Byte in the username.
All versions of phpMyAdmin from 4.6.x (prior to 4.6.5), 4.4.x (prior to 4.4.15.9), and 4.0.x (prior to 4.0.10.18) are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
If an immediate update is not possible, consider disabling root access in phpMyAdmin as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
