This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-6610 →

DEBIAN-CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the...

Original description

The description as published by the source.

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]

Debian:13 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]

Debian:14 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]

References

advisory security-tracker.debian.org