Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2014-8961 First vendor Publication 2014-11-30
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:N/A:N)
Cvss Base Score 4 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Directory traversal vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to obtain potentially sensitive information about a file's line count via a crafted parameter.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8961

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 35
Os 3

Nessus® Vulnerability Scanner

Date Description
2015-06-01 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201505-03.nasl - Type : ACT_GATHER_INFO
2014-12-07 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15588.nasl - Type : ACT_GATHER_INFO
2014-12-06 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-735.nasl - Type : ACT_GATHER_INFO
2014-12-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15535.nasl - Type : ACT_GATHER_INFO
2014-12-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15538.nasl - Type : ACT_GATHER_INFO
2014-11-27 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2014-228.nasl - Type : ACT_GATHER_INFO
2014-11-27 Name : The remote web server hosts a PHP application that is affected by multiple vu...
File : phpmyadmin_pmasa_2014_16.nasl - Type : ACT_GATHER_INFO
2014-11-24 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_a5d4a82a715311e488c76805ca0b3d42.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html
http://www.mandriva.com/security/advisories?name=MDVSA-2014:228
http://www.phpmyadmin.net/home_page/security/PMASA-2014-16.php
http://www.securityfocus.com/bid/71245
https://github.com/phpmyadmin/phpmyadmin/commit/b99b6b6672ff2419f05b05740c80c...
https://security.gentoo.org/glsa/201505-03
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Date Informations
2024-11-28 12:43:41
  • Multiple Updates
2021-05-04 12:35:07
  • Multiple Updates
2021-04-22 01:42:40
  • Multiple Updates
2020-05-23 00:42:52
  • Multiple Updates
2018-10-31 00:20:40
  • Multiple Updates
2018-01-26 12:05:51
  • Multiple Updates
2016-12-31 09:24:22
  • Multiple Updates
2016-12-22 09:23:41
  • Multiple Updates
2016-09-08 00:22:44
  • Multiple Updates
2015-06-02 13:27:52
  • Multiple Updates
2015-04-01 09:26:51
  • Multiple Updates
2014-12-17 21:24:50
  • Multiple Updates
2014-12-12 09:24:55
  • Multiple Updates
2014-12-08 13:26:24
  • Multiple Updates
2014-12-07 13:26:19
  • Multiple Updates
2014-12-03 13:28:24
  • Multiple Updates
2014-12-01 17:25:23
  • Multiple Updates
2014-11-30 17:25:32
  • First insertion