CVE-2004-2632: High severity phpMyAdmin phpMyAdmin vulnerability
Published Dec 31, 2004
·Updated
phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg['Servers'] variables.
Affected Software
12 affected components
phpMyAdmin phpMyAdmin=2.5.1
phpMyAdmin phpMyAdmin=2.5.2
phpMyAdmin phpMyAdmin=2.5.2_pl1
phpMyAdmin phpMyAdmin=2.5.3
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.5.5
phpMyAdmin phpMyAdmin=2.5.5_pl1
phpMyAdmin phpMyAdmin=2.5.5_rc1
phpMyAdmin phpMyAdmin=2.5.5_rc2
phpMyAdmin phpMyAdmin=2.5.6_rc1
phpMyAdmin phpMyAdmin=2.5.6_rc2
phpMyAdmin phpMyAdmin=2.5.7
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Dec 5, 2005
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2632?
CVE-2004-2632 has been classified as having a medium severity level.
2
How do I fix CVE-2004-2632?
To fix CVE-2004-2632, upgrade your phpMyAdmin installation to version 2.5.8 or later.
3
What versions of phpMyAdmin are affected by CVE-2004-2632?
CVE-2004-2632 affects phpMyAdmin versions from 2.5.1 to 2.5.7.
4
What types of attacks are possible with CVE-2004-2632?
CVE-2004-2632 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers.
5
Is authentication required to exploit CVE-2004-2632?
Authentication is not required to exploit CVE-2004-2632, making it particularly dangerous.