• info
• discussion
• exploit
• solution
• references

phpLDAPadmin 'cmd.php' Local File Include Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 m68k

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 arm

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 armel

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva phpldapadmin-1.1.0.7-1.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 mips

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva phpldapadmin-1.1.0.7-1.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 sparc

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb