Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200712-05 Normal: PEAR::MDB2 Security Flaw

gentoo
Calendar Grey December 9, 2007
Scroller Gentoo
A PYTHON::PANDAS flaw could leak private information to external threats. Impacted individuals should update immediately.
A vulnerability when handling database input in PEAR::MDB2 allows remote attackers to obtain sensitive information.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200712-05
                                            https://security.gentoo.org/

  Severity: Normal
     Title: PEAR::MDB2: Information disclosure
      Date: December 09, 2007
      Bugs: #198446
        ID: 200712-05


Synopsis
=======
A vulnerability when handling database input in PEAR::MDB2 allows
remote attackers to obtain sensitive information.

Background
=========
PEAR::MDB2 is a database abstraction layer for PHP aimed to provide a
common API for all supported relational database management systems. A
LOB ("large object") is a database field holding binary data.

Affected packages
================
    -------------------------------------------------------------------
     Package            /    Vulnerable    /                Unaffected
    -------------------------------------------------------------------
  1  dev-php/PEAR...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo remote access information disclosure normal severity database input PEAR::MDB2

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo remote access information disclosure normal severity database input PEAR::MDB2

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround