phpMyAdmin Denial of service (DOS) attack with dbase extension
An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6632US | medium5.9 | — | ||
An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions (prior to 4.6.4… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.securityfocus.com/bid/92497WEB
- https://github.com/phpmyadmin/composerPACKAGE
- https://lists.debian.org/debian-lts-announce/2019/06/msg00009.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2016-6632ADVISORY
- https://security.gentoo.org/glsa/201701-32WEB
- https://www.phpmyadmin.net/security/PMASA-2016-55WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan