← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2013-3239

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2013-3239
1
 
Candidate: CVE-2013-3239
2
 
PublicDate: 2013-04-25
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3239
5
 
 http://www.phpmyadmin.net/home_page/security/PMASA-2013-3.php
6
 
Description:
7
 
 phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir
8
 
 directory is configured, allows remote authenticated users to execute
9
 
 arbitrary code by using a double extension in the filename of an export
10
 
 file, leading to interpretation of this file as an executable file by the
11
 
 Apache HTTP Server, as demonstrated by a .php.sql filename.
12
 
Ubuntu-Description:
13
 
Notes:
14
 
 jdstrand> per Debian, Requires non-default option saveDir to be enabled, an
15
 
  authenticated untrusted user and Apache mod_mime
16
 
Bugs:
17
 
Priority: low
18
 
Discovered-by:
19
 
Assigned-to:
20
 
 
21
 
Patches_phpmyadmin:
22
 
upstream_phpmyadmin: released (4:3.4.11.1-2)
23
 
hardy_phpmyadmin: ignored (reached end-of-life)
24
 
lucid_phpmyadmin: ignored (reached end-of-life)
25
 
oneiric_phpmyadmin: ignored (reached end-of-life)
26
 
precise_phpmyadmin: ignored (reached end-of-life)
27
 
precise/esm_phpmyadmin: DNE (precise was needed)
28
 
quantal_phpmyadmin: ignored (reached end-of-life)
29
 
raring_phpmyadmin: not-affected
30
 
saucy_phpmyadmin: not-affected (4:3.5.8.1-1)
31
 
trusty_phpmyadmin: not-affected (4:3.5.8.1-1)
32
 
utopic_phpmyadmin: not-affected (4:3.5.8.1-1)
33
 
vivid_phpmyadmin: not-affected (4:3.5.8.1-1)
34
 
vivid/stable-phone-overlay_phpmyadmin: DNE
35
 
vivid/ubuntu-core_phpmyadmin: DNE
36
 
wily_phpmyadmin: not-affected (4:3.5.8.1-1)
37
 
xenial_phpmyadmin: not-affected (4:3.5.8.1-1)
38
 
yakkety_phpmyadmin: not-affected (4:3.5.8.1-1)
39
 
zesty_phpmyadmin: not-affected (4:3.5.8.1-1)
40
 
devel_phpmyadmin: not-affected (4:3.5.8.1-1)