Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 30 Mar 2008 15:20:48 +0200
From: Hanno Böck <>
  "Steven M. Christey" <>
Subject: CVE request: phpmyadmin (PMASA-2008-2)

Announcement-ID: PMASA-2008-2
Date: 2008-03-29

Credentials disclosure on shared hosts via session data

We received an advisory from Jim Hermann, and we wish to thank him for his 
work. phpMyAdmin saves sensitive information like the MySQL username and 
password and the Blowfish secret key in session data, which might be 
unprotected on a shared host. 

Hanno Böck		Blog:
GPG: 3DBD3B20		Jabber/Mail:

Download attachment "signature.asc " of type "application/pgp-signature" (198 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.