CVE-2004-0129: Medium severity phpMyAdmin phpMyAdmin vulnerability
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0129?
CVE-2004-0129 is classified as a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2004-0129?
To fix CVE-2004-0129, upgrade to phpMyAdmin version 2.5.6 or later, which addresses the directory traversal issue.
What software versions are affected by CVE-2004-0129?
CVE-2004-0129 affects phpMyAdmin versions 2.5.5 and earlier, along with multiple earlier releases.
Can I protect my system from CVE-2004-0129 if I can't upgrade immediately?
Yes, temporarily restricting access to the export.php file can help mitigate risks from CVE-2004-0129 while you plan an upgrade.
How does CVE-2004-0129 exploit directory traversal vulnerabilities?
CVE-2004-0129 uses '..' (dot dot) sequences in the 'what' parameter to traverse directories and access sensitive files.