CVE-2011-2505

Publication date 14 July 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a “remote variable manipulation vulnerability.”

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
phpmyadmin 13.10 saucy
Fixed 4:3.4.3.1-1
13.04 raring
Fixed 4:3.4.3.1-1
12.10 quantal
Fixed 4:3.4.3.1-1
12.04 LTS precise
Fixed 4:3.4.3.1-1
11.10 oneiric
Fixed 4:3.4.3.1-1
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life