Re: Vulnerability Announced in phpMyAdmin
| From: | Daniel Fenn | Date: | Wed, 26 Sep 2012 06:22:23 +0000 |
| Subject: | Re: Vulnerability Announced in phpMyAdmin | ||
| References: | 1 2 | Groups: | php.db php.general php.mirrors |
| Request: | Send a blank email to php-db+get-48533@lists.php.net to get a copy of this message | ||
Thank you for the heads up.
On 9/26/12, tamouse mailing lists <tamouse.lists@gmail.com> wrote:
> On Tue, Sep 25, 2012 at 3:20 PM, Daniel Brown <danbrown@php.net> wrote:
>> Just a three-list cross-post to bring it to everyone's attention
>> at once, in case you weren't already aware. It was announced today
>> that a compromised SourceForge mirror was distributing a malicious
>> file with the phpMyAdmin package that allows an attacker to
>> arbitrarily execute code on a server hosting the exploitable package.
>> Obligatory (not intentionally self-serving) social media link here:
>>
>> https://twitter.com/oidk/status/250688002005811200
>>
>
> Signal boosting...
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
--
Regards,
Daniel Fenn