CVE-2008-5587: Path Traversal
Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter to index.php.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable register_globals in the PHP configuration (e.g., set register_globals = Off in php.ini and restart the web server) to prevent the phpPgAdmin index.php directory traversal that occurs when register_globals is enabled.
PHP register_globals = Off
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5587?
CVE-2008-5587 is classified as a high severity vulnerability due to its ability to allow remote file reading by attackers.
How do I fix CVE-2008-5587?
To fix CVE-2008-5587, disable register_globals in your PHP configuration and upgrade to a later version of phpPgAdmin.
Which versions of phpPgAdmin are affected by CVE-2008-5587?
CVE-2008-5587 affects phpPgAdmin versions 4.2.1 and earlier, as well as specific older versions.
What type of attack does CVE-2008-5587 facilitate?
CVE-2008-5587 facilitates directory traversal attacks that expose sensitive files to remote attackers.
Can CVE-2008-5587 lead to data breaches?
Yes, CVE-2008-5587 can potentially lead to data breaches by allowing unauthorized reading of system files.