Security Update for phpmyadmin

Background

phpMyAdmin is a web administration tool for managing MySQL databases. It provides a user-friendly interface for performing various database operations such as creating, modifying, and deleting databases, tables, and records. This tool is widely used by developers and administrators to simplify the management of MySQL databases. However, several vulnerabilities have been discovered in phpMyAdmin, which could potentially compromise the security of the system.

Vulnerability Detail

The vulnerabilities in phpMyAdmin include:

1. CVE-2016-6606: This vulnerability allows an attacker with access to a user's browser cookie file to decrypt the username and password. It is caused by a weakness in the encryption of the username/password stored in the phpMyAdmin cookie.

2. CVE-2016-6607: This vulnerability is a cross-site scripting (XSS) vulnerability in the replication feature of phpMyAdmin.

3. CVE-2016-6609: A specially crafted database name can be used to run arbitrary PHP commands through the array export feature.

4. CVE-2016-6611: A specially crafted database or table name can trigger an SQL injection attack through the SQL export functionality.

5. CVE-2016-6612: The LOAD LOCAL INFILE functionality can be exploited by a user to expose files on the server to the database system.

6. CVE-2016-6613: A user can create a symlink on disk to a file that phpMyAdmin is permitted to read but the user is not, thereby exposing the file to the user.

7. CVE-2016-6614: The %u username replacement functionality of the SaveDir and UploadDir features can be circumvented by a specially-crafted username, allowing traversal of the file system.

8. CVE-2016-6620: Some data passed to the PHP unserialize() function without verification can result in code execution, potentially leading to remote code execution.

9. CVE-2016-6622: An unauthenticated user can execute a denial-of-service attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true.

10. CVE-2016-6623: A malicious authorized user can cause a denial-of-service attack on a server by passing large values to a loop.

11. CVE-2016-6624: Under certain circumstances, it is possible to circumvent the phpMyAdmin IP-based authentication rules, allowing unauthorized access.

12. CVE-2016-6630: An authenticated user can trigger a denial-of-service attack by entering a very long password at the change password dialog.

13. CVE-2016-6631: A user can execute a remote code execution attack against a server when phpMyAdmin is run as a CGI application by passing a query string that is executed as a command-line argument by shell scripts.

sudo apt-get install --only-upgrade phpmyadmin

Workaround

There are no specific workarounds mentioned for these vulnerabilities. It is crucial to apply the security update as soon as possible to mitigate the risks associated with these vulnerabilities.

Conclusion

phpMyAdmin has been found to have multiple vulnerabilities that could potentially compromise the security of the system. It is crucial to upgrade to the latest version and apply the necessary security patches to mitigate these risks. For further assistance and support in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for phpmyadmin →

FAQ