Debian 4.0 DSA-1693-1 Critical: PhpPgAdmin Remote Access Risks
debian
December 27, 2008
Several remote vulnerabilities have been discovered in phpPgAdmin, a tool
to administrate PostgreSQL database over the web
Topics Covered
Summary
Cross-site scripting vulnerability allows remote attackers to inject
arbitrary web script or HTML via the server parameter.
CVE-2007-5728
Cross-site scripting vulnerability allows remote attackers to inject
arbitrary web script or HTML via PHP_SELF.
CVE-2008-5587
Directory traversal vulnerability allows remote attackers to read
arbitrary files via _language parameter.
For the stable distribution (etch), these problems have been fixed in
version 4.0.1-3.1etch1.
For the unstable distribution (sid), these problems have been fixed in
version 4.2.1-1.1.
We recommend that you upgrade your phppgadmin package.
Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
...
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!