Executive Summary

Informations
Name	CVE-2005-3621	First vendor Publication	2005-11-16
Vendor	Cve	Last vendor Modification	2008-09-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3621

CPE : Common Platform Enumeration

Type	Description	Count
Application	Phpmyadmin Phpmyadmin cpe:/a:phpmyadmin:phpmyadmin:2.6.4_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.3_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.2_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.1_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl3 cpe:/a:phpmyadmin:phpmyadmin:2.5.7_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.6_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.4 cpe:/a:phpmyadmin:phpmyadmin:2.5.3 cpe:/a:phpmyadmin:phpmyadmin:2.5.2_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.2.7_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.2.0	13

Open Source Vulnerability Database (OSVDB)

id	Description
20910	phpMyAdmin header_http.inc.php HTTP Response Splitting

Internal Sources (Detail)

Source	Url
CONFIRM	http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6
DEBIAN	http://www.debian.org/security/2006/dsa-1207
SECTRACK	http://securitytracker.com/id?1015213
SECUNIA	http://secunia.com/advisories/17578 http://secunia.com/advisories/22781
SUSE	http://www.novell.com/linux/security/advisories/2005_28_sr.html

Alert History

Date	Informations
2013-05-11 11:34:20	Multiple Updates