Vulnerability CVE-2016-6633 - CERT Civis.Net

Vulnerability Name:

CVE-2016-6633 (CCN-120020)

Assigned:

2016-12-10

Published:

2016-12-10

Updated:

2017-07-01

Summary:

An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain PHP installations that are running with the dbase extension. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

CVSS v3 Severity:

8.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.1 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2016-6633

Source: BID
Type: Third Party Advisory, VDB Entry
92500

Source: XF
Type: UNKNOWN
phpmyadmin-cve20166633-code-exec(120020)

Source: GENTOO
Type: UNKNOWN
GLSA-201701-32

Source: CCN
Type: US-CERT/NIST
Vulnerability Summary for CVE-2016-6633

Source: CCN
Type: PMASA-2016-55
phpMyAdmin - Security - PMASA-2016-55

Source: CONFIRM
Type: Patch, Vendor Advisory
https://www.phpmyadmin.net/security/PMASA-2016-56

Vulnerable Configuration:

Configuration 1:

cpe:/a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.14:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*

OR cpe:/a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20166633	V	CVE-2016-6633	2022-06-30
oval:org.opensuse.security:def:113141	P	phpMyAdmin-4.6.5.2-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:106569	P	phpMyAdmin-4.6.5.2-1.1 on GA media (Moderate)	2021-10-01
oval:com.ubuntu.bionic:def:201666330000000	V	CVE-2016-6633 on Ubuntu 18.04 LTS (bionic) - low.	2016-12-11
oval:com.ubuntu.xenial:def:201666330000000	V	CVE-2016-6633 on Ubuntu 16.04 LTS (xenial) - low.	2016-12-11
oval:com.ubuntu.disco:def:201666330000000	V	CVE-2016-6633 on Ubuntu 19.04 (disco) - low.	2016-12-11
oval:com.ubuntu.cosmic:def:201666330000000	V	CVE-2016-6633 on Ubuntu 18.10 (cosmic) - low.	2016-12-10
oval:com.ubuntu.artful:def:20166633000	V	CVE-2016-6633 on Ubuntu 17.10 (artful) - untriaged.	2016-12-10
oval:com.ubuntu.trusty:def:20166633000	V	CVE-2016-6633 on Ubuntu 14.04 LTS (trusty) - low.	2016-12-10
oval:com.ubuntu.bionic:def:20166633000	V	CVE-2016-6633 on Ubuntu 18.04 LTS (bionic) - low.	2016-12-10
oval:com.ubuntu.xenial:def:20166633000	V	CVE-2016-6633 on Ubuntu 16.04 LTS (xenial) - low.	2016-12-10
oval:com.ubuntu.cosmic:def:20166633000	V	CVE-2016-6633 on Ubuntu 18.10 (cosmic) - low.	2016-12-10
oval:com.ubuntu.precise:def:20166633000	V	CVE-2016-6633 on Ubuntu 12.04 LTS (precise) - untriaged.	2016-12-10