CVE-2005-0653 : phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscor

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.

Published 2005-05-02 04:00:00

Updated 2008-09-05 20:46:55

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2005-0653

Phpmyadmin » Phpmyadmin » Version: 2.6.1
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-0653

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-0653

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2005-0653

http://www.gentoo.org/security/en/glsa/glsa-200503-07.xml

phpMyAdmin: Multiple vulnerabilities (GLSA 200503-07) — Gentoo security
Patch

CVEs referencing this url
http://bugs.gentoo.org/show_bug.cgi?id=83792

83792 – dev-db/phpmyadmin-2.6.1-pl2 incorrectly grants wildcard privileges on databases with underscore in their name
Patch

Jump to

Vulnerability Details : CVE-2005-0653

Products affected by CVE-2005-0653

Exploit prediction scoring system (EPSS) score for CVE-2005-0653

CVSS scores for CVE-2005-0653

References for CVE-2005-0653