« Volver al listado

CVE-2005-3621

Estado: ModificadaMedia (5)—

Vulnerabilidad de inyección de CRLF en phpMyAdmin anteriores a 2.6.4-pl4 permite a atacantes remotos conducir ataques de separación de respuesta HTTP mediante scripts no especificados.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Phpmyadmin — Phpmyadmin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-3621",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-11-16T11:02:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/17578",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/22781",
      "source": "security@debian.org"
    },
    {
      "url": "http://securitytracker.com/id?1015213",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1207",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/17578",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22781",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015213",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1207",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-6",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección de CRLF en phpMyAdmin anteriores a 2.6.4-pl4 permite a atacantes remotos conducir ataques de separación de respuesta HTTP mediante scripts no especificados.\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:17:16.037",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C3663CE-AF25-4A0A-811E-DE58B7E5D934"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADDE752A-19A1-4910-9C56-0FDFFA367E30"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D2E7577-5F89-4B2C-9C28-A5268B539968"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F86B56F-510F-4C6F-A259-6200DC2B05ED"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F6E3468-78AF-471C-A09E-1ACCC6867256"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "794AE77E-843C-4CB4-9462-E4FE8C4C2896"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1600D28-5583-4FA2-835F-BCE10813DB61"
            },
            {
              "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org"
}