CVE-2008-7251: Critical severity phpmyadmin vulnerability
Published Jan 19, 2010
·Updated
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Affected Software
45 affected components
phpMyAdmin phpMyAdmin=2.11.4
phpMyAdmin phpMyAdmin=2.11.0rc1
phpMyAdmin phpMyAdmin=2.11.1.2
phpMyAdmin phpMyAdmin=2.11.5.1
phpMyAdmin phpMyAdmin=2.11.3rc1
phpMyAdmin phpMyAdmin=2.11.1
phpMyAdmin phpMyAdmin=2.11.5.0
phpMyAdmin phpMyAdmin=2.11.6rc1
phpMyAdmin phpMyAdmin=2.11.1rc1
phpMyAdmin phpMyAdmin=2.11.9.0
phpMyAdmin phpMyAdmin=2.11.9.1
phpMyAdmin phpMyAdmin=2.11.0-beta1
phpMyAdmin phpMyAdmin=2.11.2
phpMyAdmin phpMyAdmin=2.11.7
phpMyAdmin phpMyAdmin=2.11.5
phpMyAdmin phpMyAdmin=2.11.5.2
phpMyAdmin phpMyAdmin=2.11.2.2
phpMyAdmin phpMyAdmin=2.11.1-rc1
phpMyAdmin phpMyAdmin=2.11.4rc1
phpMyAdmin phpMyAdmin=2.11.5rc1
phpMyAdmin phpMyAdmin=2.11.5-rc1
phpMyAdmin phpMyAdmin=2.11.8
phpMyAdmin phpMyAdmin=2.11.4.0
phpMyAdmin phpMyAdmin=2.11.3
phpMyAdmin phpMyAdmin=2.11.2.1
phpMyAdmin phpMyAdmin=2.11.3-rc1
phpMyAdmin phpMyAdmin=2.11.0-rc1
phpMyAdmin phpMyAdmin=2.11.9.5
phpMyAdmin phpMyAdmin=2.11.6.0
phpMyAdmin phpMyAdmin=2.11.7.0
phpMyAdmin phpMyAdmin=2.11.9.6
phpMyAdmin phpMyAdmin=2.11.2.0
phpMyAdmin phpMyAdmin=2.11.9.2
phpMyAdmin phpMyAdmin=2.11.9.3
phpMyAdmin phpMyAdmin=2.11.4-rc1
phpMyAdmin phpMyAdmin=2.11.1.1
phpMyAdmin phpMyAdmin=2.11.6
phpMyAdmin phpMyAdmin=2.11.9
phpMyAdmin phpMyAdmin=2.11.0beta1
phpMyAdmin phpMyAdmin=2.11.9.4
phpMyAdmin phpMyAdmin=2.11.3.0
phpMyAdmin phpMyAdmin=2.11.0.0
phpMyAdmin phpMyAdmin=2.11.6-rc1
phpMyAdmin phpMyAdmin=2.11.1.0
phpMyAdmin phpMyAdmin=2.11.0
Event History
Jan 19, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-7251?
The severity of CVE-2008-7251 has not been explicitly rated, but the creation of a temporary directory with 0777 permissions poses significant security risks.
2
How do I fix CVE-2008-7251?
To fix CVE-2008-7251, update phpMyAdmin to version 2.11.10 or later, which corrects the permission setting issue.
3
What versions of phpMyAdmin are affected by CVE-2008-7251?
CVE-2008-7251 affects all phpMyAdmin versions from 2.11.x before 2.11.10.
4
What impact does CVE-2008-7251 have?
CVE-2008-7251 can lead to unauthorized access or manipulation of the temporary directory due to the insecure permissions.
5
Is CVE-2008-7251 exploitable?
Yes, CVE-2008-7251 is exploitable due to the inappropriate permissions set for the temporary directory.