CVE-2008-5587

Common Vulnerabilities and Exposures

CVE-2008-5587 at MITRE

Details

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Novell Bugzilla entry: 462762

SUSE Security Advisories:

SUSE-SR:2009:004, published Tue, 17 Feb 2009 10:00:00 +0000
SUSE-SR:2009:004 , published Tue, 17 Feb 2009 10:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`phpPgAdmin >= 4.1.3-19.2`	ZYPP Patch Nr: 5984 SAT Patch Nr: 503
openSUSE 11.0	`phpPgAdmin >= 4.2-16.2`	ZYPP Patch Nr: 5984 SAT Patch Nr: 503
openSUSE 11.1	`phpPgAdmin >= 4.2-1.72.1`	ZYPP Patch Nr: 5984 SAT Patch Nr: 503