Description
The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script.
References
- 16053 vdb-entry
- ADV-2005-0436 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=88831
- GLSA-200504-30 vendor-advisory