phpMyAdminã«ã¦ä»»æã®ã³ã¼ããå®è¡å¯è½ãªèå¼±æ§ï¼CVE-2011-2505, CVE-2011-2506ï¼ã«é¢ããæ¤è¨¼ã¬ãã¼ã Tweet 2011/07/29 NTTãã¼ã¿å 端æè¡æ ªå¼ä¼ç¤¾ è¾» ä¼¸å¼ æ³ç° å¹¸å® å°æ¾ å¾¹ä¹ ãæ¦è¦ã phpMyAdminã«ã»ãã·ã§ã³å¤æ°å ã®ãã¼ã¿ã夿´å¯è½ãªèå¼±æ§ï¼CVE-2011-2505ï¼ãçºè¦ããã¾ããã ãã®èå¼±æ§ã¯ãphpMyAdminä¸ã®$_SESSIONé åã«PHPã³ã¼ããåãè¾¼ããã¨ãå¯è½ã§ããã¾ããphpMyAdminã«å¤æ°ãé©åã«å¦çããªãèå¼±æ§ï¼CVE-2011-2506ï¼ãçºè¦ããã¾ããã ãã®èå¼±æ§ã¯ãã³ã³ãã£ã°ä½æçæç¨ã¹ã¯ãªããã«ããã¦å¤æ°å ãã¼ã¿ãé©åã«å¦çããªããããPHPã³ã¼ããå«ããã¡ã¤ã«ãåºåå¯è½ã§ãããããã®èå¼±æ§ãçµã¿åããã¦å©ç¨ãããã¨ã«ãããWebãµã¼ãã®å®è¡æ¨©éã§ä»»æã®PHPã³ã¼ããå®è¡å¯è½ã¨ãªã
phpMyadminã§ãã¼ã¿ãã¨ã¯ã¹ãã¼ããããã®ããå¥ã®ãã£ã¬ã¯ããªã«ã¤ã³ã¹ãã¼ã«ãããã¨ãã¦ãã¾ãããä¸è¨ã®ã¨ã©ã¼ãåºã¦ãã¾ãè¡ãã¾ããã ä½ãåé¡ãªã®ããæãã¯ãåé¡ã®å¯è½æ§ã ãã§ããã¢ããã¤ã¹é ããªãã§ããããã ãã¼ã¿ãã¼ã¹: `_ââ_db` CREATE DATABASE `_ââ_db` DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; MySQLã®ã¡ãã»ã¼ã¸ #1044 - Access denied for user '_â²â²_db'@'000.000.000.000' to database '_ââ_db' å®ãããé¡ããããã¾ãã
'; doc += ''; doc += ''; doc += ''; winimg.document.writeln(doc); winimg.document.close(); } //]]> phpMyAdminã®ãªã¬ã¼ã·ã§ã³æ©è½ã®è¨å® ä»ã¾ã§å©ç¨ããæ©ä¼ã®ãªãã£ãphpMyAdminã®ãªã¬ã¼ã·ã§ã³æ©è½ã ãããã¾ãã¾ä»åå¿ è¦ã«ãªã使ã£ã¦ã¿ããã¨æã£ããã¨ã©ã¼ãåºã¦å©ç¨ã§ããªãã£ãã 以ä¸ã®æé ã§å©ç¨ã§ããããã«ãªãã config.inc.phpã以ä¸ã®å 容ã§ä¿®æ£ãã $cfg['Servers'][$i]['pmadb'] = âphpmyadminâ; $cfg['Servers'][$i]['bookmarktable'] = âpma_bookmarkâ; $cfg['Servers'][$i]['relation'] = âpma_relationâ; $cfg['S
phpMyAdmin ã§ MySQL ã®ã¹ãã¬ã¼ã¸ã¨ã³ã¸ã³ã MyISAM ãã InnoDB ã«å¤æ´ããå ·ä½çãªæ¹æ³ã§ããããã§ã¯ XAMPP ç°å¢ï¼Windows XP + MySQL 5.0 + phpMyAdmin 2.11.4ï¼ã§è©¦ãããã®ã§ç´¹ä»ãã¾ãã ãã®ã¨ã³ããªã¼ã¯ä»¥ä¸ã®è¨äºã«è§¦çºããã¦æ¸ãããã®ã§ãã techknow.yagishita.net - MTã使ã£ããµã¤ãæ§ç¯ãã¯ãã㯠(2): ãã¿ãã«ã«ãããåæ§ç¯ãã¥ã¼ãã³ã° ï¼ï¼my.cnf ã夿´ãã ã¹ãã¬ã¼ã¸ã¨ã³ã¸ã³ã MyISAM ãã InnoDB ã«å¤æ´ããã«ã¯ããã¼ãã«åä½ã§å¤æ´ãã¾ããphpMyAdmin ã® GUI ã«ããã¹ãã¬ã¼ã¸ã¨ã³ã¸ã³ã®å¤æ´æ¹æ³ã¯ã 夿´ããããã¼ãã«åãã¯ãªã㯠ä¸é¨ã¿ãã®ãæä½ããã¯ãªã㯠ããã¼ãã«ãªãã·ã§ã³ãã®ãã¹ãã¬ã¼ã¸ã¨ã³ã¸ã³ããããInnoDBãã鏿 ã¨ãªãã¾ã
phpMyAdmin ã®ãã¼ããéãã¦ã¿ã¾ãã 2007-07-15-1: [PHP][MySQL] phpMyAdmin ãã使ãã®äººã¯ç¥ã£ã¦ããã¨æãã¾ãããphpMyAdmin ã¯ãã¼ãã夿´ãããã¨ãã§ãã¾ãã è¤æ°ã® phpMyAdmin ã使ãåãã¦ããã¨ãã«ããã¼ããå¤ãã¦ãããã¨ã§èª¤æä½ãæ¸ãããã¨ãã§ãã¾ãã ãã¼ãã¯ãSourceForge ã® phpMyAdmin ã®ããã¸ã§ã¯ããããã¦ã³ãã¼ãã§ãã¾ãã - SourceForge.net: phpMyAdmin http://sourceforge.net/project/showfiles.php?group_id=23067 ã¨ãããããã¼ãã®ãµã ãã¤ã«ãªã©ç¨æããã¦ããªãã®ã§ãã©ã®ãããªãã¼ãããã¦ã³ãã¼ããã¦ã¿ãã¾ã§ãããã¾ããã ããã§ãä¸è¨ãã¼ã¸ãããã¦ã³ãã¼ãã§ãããã¼ããéãã¦ããµã ãã¤ã«ã使ãã¦
ã©ã³ãã³ã°
ãç¥ãã
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}