*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Marc Deslauriers 
(mdeslaur):

Binary package hint: phpmyadmin

phpmyadmin in hardy (still under LTS support) is vulnerable to
CVE-2009-4605.

See http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4605 for more
Information.

Debian has fixed it long ago (April 17th 2010) with version 
4:2.11.8.1-5+lenny4, see
http://packages.debian.org/changelogs/pool/main/p/phpmyadmin/phpmyadmin_2.11.8.1-5+lenny4/changelog#versionversion4:2.11.8.1-5_lenny4
http://www.debian.org/security/2010/dsa-2034

For some weeks now the bug is widely misused to break into servers, it
needs to be fixed as security update for hardy.

Regards Christoph

** Affects: phpmyadmin (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: hardy
-- 
Security: phpmyadmin in hardy vulnerable to CVE-2009-4605
https://bugs.edge.launchpad.net/bugs/615636
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to