Bug 982127 (CVE-2016-5098) - VUL-0: CVE-2016-5098: phpmyadmin: File Traversal Protection Bypass on Error Reporting (PMASA-2016-15)
Summary: VUL-0: CVE-2016-5098: phpmyadmin: File Traversal Protection Bypass on Error R...
Status: RESOLVED INVALID
Alias: CVE-2016-5098
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 42.1
: P5 - None : Normal
Target Milestone: ---
Assignee: Eric Schirra
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-05-28 15:39 UTC by Andreas Stieger
Modified: 2016-05-30 07:27 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Stieger 2016-05-28 15:39:38 UTC 
https://www.phpmyadmin.net/security/PMASA-2016-15/

Announcement-ID: PMASA-2016-15
Date: 2016-05-25
Updated: 2016-05-26
Summary File Traversal Protection Bypass on Error Reporting
Description: A specially crafted payload could result in the error reporting component exposing whether an arbitrary file exists on the file system and the size of that file.

The attacker must be able to intercept and modify the user's POST data and must be able to trigger a JavaScript error to the user.

Mitigation: This attack can be mitigated in affected installations by setting `$cfg['Servers'][$i]['SendErrorReports'] = 'never';`. Upgrading to a more recent development commit is suggested.

Affected Versions: Git 'master' development branch. No released version was vulnerable.

All released versions are not affected as they use precalculated data.

Assigned CVE ids: CVE-2016-5098
CWE ids: CWE-661
Patches

The following commits have been made on the 4.6 branch to fix this issue:

    d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8
Comment 1 Andreas Stieger 2016-05-28 15:40:10 UTC 
git master only, closing