MediaWiki < 1.19.11 / 1.21.5 / 1.22.2 Multiple Remote Code Execution Vulnerabilities

medium Nessus Plugin ID 72215

Language:

Synopsis

The remote web server contains an application that is affected by multiple remote code execution vulnerabilities.

Description

According to its version number, the instance of MediaWiki running on the remote host is affected by the following remote code execution vulnerabilities :

- A user-input validation error exists during thumbnail generation in the 'thumb.php' script that allows the execution of arbitrary shell commands via a specially crafted DjVu file.

- A user-input validation error exists in the 'pdfhandler_body.php' script used by the PdfHandler extension that allows the execution of arbitrary shell commands via a specially crafted PDF file.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. Also note that the affected features are not enabled by default.

Solution

Upgrade to MediaWiki version 1.19.11 / 1.21.5 / 1.22.2 or later.

Plugin Details

Severity: Medium

ID: 72215

File Name: mediawiki_1_19_11.nasl

Version: 1.15

Type: remote

Family: CGI abuses

Published: 1/30/2014

Updated: 6/5/2024

Configuration: Enable paranoid mode, Enable thorough checks

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Medium

Base Score: 6

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2014-1610

Vulnerability Information

CPE: cpe:/a:mediawiki:mediawiki

Required KB Items: www/PHP, Settings/ParanoidReport, installed_sw/MediaWiki

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/28/2014

Vulnerability Publication Date: 1/28/2014

Exploitable With

Core Impact

Metasploit (MediaWiki Thumb.php Remote Command Execution)

Elliot (MediaWiki thumb.php page Parameter Remote Shell Command Injection)

Reference Information

CVE: CVE-2014-1610

BID: 65223

Detections

Analytics