Summary
The remote host is missing updates announced in
advisory GLSA 200903-32.
Solution
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=dev-db/phpmyadmin-2.11.9.4'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200903-32 http://bugs.gentoo.org/show_bug.cgi?id=237781
http://bugs.gentoo.org/show_bug.cgi?id=244914
http://bugs.gentoo.org/show_bug.cgi?id=246831
http://bugs.gentoo.org/show_bug.cgi?id=250752
Insight
Multiple vulnerabilities have been discovered in phpMyAdmin, the worst of which may allow for remote code execution.
Severity
Classification
-
CVE CVE-2006-6942, CVE-2007-5977, CVE-2008-4096, CVE-2008-4775, CVE-2008-5621 -
CVSS Base Score: 8.5
AV:N/AC:M/Au:S/C:C/I:C/A:C
Related Vulnerabilities