Vulnerability-Lookup

FKIE_CVE-2001-1060

Vulnerability from fkie_nvd - Published: 2001-07-31 04:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.

References

URL	Tags
cve@mitre.org	http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/
cve@mitre.org	http://www.securityfocus.com/archive/1/200596
cve@mitre.org	http://www.securityfocus.com/bid/3121	Patch
af854a3a-2127-422b-91ae-364da2661108	http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/200596
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/3121	Patch

Impacted products

Vendor	Product	Version
phpmyadmin	phpmyadmin	2.0
phpmyadmin	phpmyadmin	2.0.1
phpmyadmin	phpmyadmin	2.0.2
phpmyadmin	phpmyadmin	2.0.3
phpmyadmin	phpmyadmin	2.0.4
phpmyadmin	phpmyadmin	2.0.5
phpmyadmin	phpmyadmin	2.1
phpmyadmin	phpmyadmin	2.1.1
phpmyadmin	phpmyadmin	2.1.2
phpmyadmin	phpmyadmin	2.2_pre1
phpmyadmin	phpmyadmin	2.2_rc1
phpmyadmin	phpmyadmin	2.2_rc2
phpmyadmin	phpmyadmin	2.2_rc3

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "61A423F0-91C8-48C9-A6B1-46DBB1A31DC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "59384A5A-F530-4417-8AFB-005EE4A54A44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "85CFC048-C7C5-47E6-A7E9-E1ED99142493",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "120A58AE-69B7-426D-947D-9C0D9D9CE1E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "980AC0DB-2759-49D3-8347-C119AFFF8DBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CABC8407-173D-466B-B366-5F7F5D9F2F14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FF189AE-9485-4F8C-AAAE-25088DF6F964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "560BC57D-BDCE-4479-9847-6DB53A89FFD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4859644F-E5FF-4AE4-B16D-CC2243964D81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php."
    }
  ],
  "id": "CVE-2001-1060",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2001-07-31T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/200596"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/3121"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/200596"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/3121"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2001-1060 (GCVE-0-2001-1060)

Vulnerability from cvelistv5 – Published: 2002-02-02 05:00 – Updated: 2024-08-08 04:44

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.securityfocus.com/bid/3121	vdb-entryx_refsource_BID
	http://freshmeat.net/redir/phpmyadmin/8001/url_ch…	x_refsource_MISC
	http://www.securityfocus.com/archive/1/200596	mailing-listx_refsource_BUGTRAQ

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T04:44:07.019Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "3121",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/3121"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/"
          },
          {
            "name": "20010731 New command execution vulnerability in myPhpAdmin",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/200596"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2001-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-02-06T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "3121",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/3121"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/"
        },
        {
          "name": "20010731 New command execution vulnerability in myPhpAdmin",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/200596"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2001-1060",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "3121",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/3121"
            },
            {
              "name": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/",
              "refsource": "MISC",
              "url": "http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/"
            },
            {
              "name": "20010731 New command execution vulnerability in myPhpAdmin",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/200596"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2001-1060",
    "datePublished": "2002-02-02T05:00:00",
    "dateReserved": "2002-01-31T00:00:00",
    "dateUpdated": "2024-08-08T04:44:07.019Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2001-1060

CVE-2001-1060 (GCVE-0-2001-1060)

Tags

Sightings

Nomenclature