Vulnerability CVE-2013-3238

Vulnerability Name:

CVE-2013-3238 (CCN-83791)

Assigned:

2013-04-24

Published:

2013-04-24

Updated:

2013-11-19

Summary:

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.

CVSS v3 Severity:

4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.0 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.0 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Gain Privileges

References:

Source: BUGTRAQ
Type: UNKNOWN
20130424 [waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin

Source: MITRE
Type: CNA
CVE-2013-3238

Source: FEDORA
Type: UNKNOWN
FEDORA-2013-7000

Source: FEDORA
Type: UNKNOWN
FEDORA-2013-6977

Source: FEDORA
Type: UNKNOWN
FEDORA-2013-6928

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2013:1065

Source: CCN
Type: Full-disclosure Mailing List, Wed, 24 Apr 2013 13:41:16 -0700 (PDT)
Multiple Vulnerabilities in phpMyAdmin

Source: EXPLOIT-DB
Type: UNKNOWN
25136

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2013:160

Source: CCN
Type: phpMyAdmin Web Site
phpMyAdmin

Source: CCN
Type: PMASA-2013-2
Remote code execution via preg_replace()

Source: CONFIRM
Type: UNKNOWN
http://www.phpmyadmin.net/home_page/security/PMASA-2013-2.php

Source: CCN
Type: BID-59460
phpMyAdmin CVE-2013-3238 Multiple Arbitrary PHP Code Execution Vulnerabilities

Source: XF
Type: UNKNOWN
phpmyadmin-cve20133238-code-exec(83791)

Source: CONFIRM
Type: UNKNOWN
https://github.com/phpmyadmin/phpmyadmin/commit/dedd542cdaf1606ca9aa3f6f8f8adb078d8ad549

Source: CONFIRM
Type: UNKNOWN
https://github.com/phpmyadmin/phpmyadmin/commit/ffa720d90a79c1f33cf4c5a33403d09a67b42a66

Source: CCN
Type: Packet Storm Security [04-25-2013]
phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite

Source: CCN
Type: Packet Storm Security [04-29-2013]
phpMyAdmin Authenticated Remote Code Execution

Source: CONFIRM
Type: UNKNOWN
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [04-25-2013]

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [05-01-2013]

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-3238

Vulnerable Configuration:

Configuration 1:

cpe:/a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.1.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.2.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.2.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.2.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.3.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.4:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.5:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.6:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.7:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.7:rc1:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:3.5.8:rc1:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:phpmyadmin:phpmyadmin:3.5.2.1:*:*:*:*:*:*:*