{"hash": "eee157654412e496e933c5720fb9c7eacb68eaec891df1806905fff50a2bbc0f", "id": "CVE-2014-9487", "lastseen": "2017-11-09T11:53:17", "viewCount": 2, "hashmap": [{"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "fc880750ec23884d6e16687073a05ca8", "key": "cpe"}, {"hash": "54720f019a90bcc4b359f3362e69b421", "key": "cvelist"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "28e0f3c1c2f9dee313bab7878dcba83d", "key": "description"}, {"hash": "8f4da840af431ae93f56cf4791bbc474", "key": "href"}, {"hash": "4aa3d8b7b3f88e7374a9488e3cabfe0f", "key": "modified"}, {"hash": "cbfb0f962bea984d2fb7bd86b67833b4", "key": "published"}, {"hash": "4aa4f3bc95c796444fadefb9877f31c3", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "7f430a74250285f20685124ccc25806d", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}], "bulletinFamily": "NVD", "cpe": ["cpe:/a:mediawiki:mediawiki:1.23.3", "cpe:/a:mediawiki:mediawiki:1.22.4", "cpe:/a:mediawiki:mediawiki:1.22.14", "cpe:/a:mediawiki:mediawiki:1.22.2", "cpe:/a:mediawiki:mediawiki:1.19.9", "cpe:/a:mediawiki:mediawiki:1.23.4", "cpe:/a:mediawiki:mediawiki:1.19.0", "cpe:/a:mediawiki:mediawiki:1.19.13", "cpe:/a:mediawiki:mediawiki:1.19:beta_2", "cpe:/a:mediawiki:mediawiki:1.23.5", "cpe:/a:mediawiki:mediawiki:1.19:beta_1", "cpe:/a:mediawiki:mediawiki:1.19.2", "cpe:/a:mediawiki:mediawiki:1.23.1", "cpe:/a:mediawiki:mediawiki:1.23.7", "cpe:/a:mediawiki:mediawiki:1.23.6", "cpe:/a:mediawiki:mediawiki:1.22.13", "cpe:/a:mediawiki:mediawiki:1.19.22", "cpe:/a:mediawiki:mediawiki:1.19.4", "cpe:/a:mediawiki:mediawiki:1.23.2", "cpe:/a:mediawiki:mediawiki:1.19.11", "cpe:/a:mediawiki:mediawiki:1.19.17", "cpe:/a:mediawiki:mediawiki:1.22.12", "cpe:/a:mediawiki:mediawiki:1.19.21", "cpe:/a:mediawiki:mediawiki:1.24.0", "cpe:/a:mediawiki:mediawiki:1.22.0:rc1", "cpe:/a:mediawiki:mediawiki:1.19.12", "cpe:/a:mediawiki:mediawiki:1.23.0", "cpe:/a:mediawiki:mediawiki:1.22.6", "cpe:/a:mediawiki:mediawiki:1.22.0", "cpe:/a:mediawiki:mediawiki:1.19.3", "cpe:/a:mediawiki:mediawiki:1.19.1", "cpe:/a:mediawiki:mediawiki:1.19.8", "cpe:/a:mediawiki:mediawiki:1.19.19", "cpe:/a:mediawiki:mediawiki:1.19.20", "cpe:/a:mediawiki:mediawiki:1.19.7", "cpe:/a:mediawiki:mediawiki:1.22.7", "cpe:/a:mediawiki:mediawiki:1.19.5", "cpe:/a:mediawiki:mediawiki:1.19.18", "cpe:/a:mediawiki:mediawiki:1.22.11", "cpe:/a:mediawiki:mediawiki:1.22.10", "cpe:/a:mediawiki:mediawiki:1.19.16", "cpe:/a:mediawiki:mediawiki:1.19.10", "cpe:/a:mediawiki:mediawiki:1.22.3", "cpe:/a:mediawiki:mediawiki:1.22.5", "cpe:/a:mediawiki:mediawiki:1.19", "cpe:/a:mediawiki:mediawiki:1.22.1", "cpe:/a:mediawiki:mediawiki:1.22.8", "cpe:/a:mediawiki:mediawiki:1.19.6", "cpe:/a:mediawiki:mediawiki:1.19.15", "cpe:/a:mediawiki:mediawiki:1.22.9", "cpe:/a:mediawiki:mediawiki:1.19.14"], "assessment": {"system": "", "name": "", "href": ""}, "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "edition": 3, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "vulnersScore": 7.5}, "type": "cve", "description": "The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053.", "title": "CVE-2014-9487", "history": [{"bulletin": {"hash": "9941556c488c765538f1b37028ccdce3b0da1a766b50753cab837ba82c2f83c4", "edition": 1, "lastseen": "2016-03-20T21:42:20", "enchantments": {}, "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "8f4da840af431ae93f56cf4791bbc474", "key": "href"}, {"hash": "aa1db4be1f20a576a972213bb9fae26a", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "assessment"}, {"hash": "aa1db4be1f20a576a972213bb9fae26a", "key": "modified"}, {"hash": "95aec68442a0e380294e35087f7896a8", "key": "references"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "7ec3beb45cb57d031869bba0d52a409f", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "54720f019a90bcc4b359f3362e69b421", "key": "cvelist"}, {"hash": "bf74d37f42d8747a1c5a2137163e01c9", "key": "cvss"}, {"hash": "fa61d470f9ba0711f1206e87cc8396ea", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "bulletinFamily": "NVD", "cpe": [], "assessment": {}, "history": [], "id": "CVE-2014-9487", "type": "cve", "description": "TimedMediaHandler extension for MediaWiki could allow a remote attacker to obtain sensitive information, caused by the faiure to properly validate the XML External Entity Reference(XXE). By sending specially-crafted XML data, a remote attacker could exploit this vulnerability to obtain sensitive information.", "title": "CVE-2014-9487: TimedMediaHandler extension for MediaWiki getID3 information disclosure", "cvss": {"score": 3.7, "vector": "AV:NETWORK/AC:LOW/Au:UNKNOWN/C:PARTIAL/I:NONE/A:NONE/"}, "objectVersion": "1.2", "cvelist": ["CVE-2014-9487"], "viewCount": 0, "published": "2014-12-21T00:00:00", "references": ["http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9487", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html", "https://bugzilla.redhat.com/show_bug.cgi?id=1175828"], "reporter": "NVD", "scanner": [], "modified": "2014-12-21T00:00:00", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9487"}, "lastseen": "2016-03-20T21:42:20", "edition": 1, "differentElements": ["cvss", "references", "assessment", "description", "published", "modified", "title"]}, {"bulletin": {"hash": "ea2c177fd6e5e208c50dc38fde0ee35587b25d9179e30ae261c4089013e5eaa5", "edition": 2, "lastseen": "2017-10-18T10:45:49", "enchantments": {}, "hashmap": [{"hash": "28e0f3c1c2f9dee313bab7878dcba83d", "key": "description"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "7f430a74250285f20685124ccc25806d", "key": "title"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "8f4da840af431ae93f56cf4791bbc474", "key": "href"}, {"hash": "4aa4f3bc95c796444fadefb9877f31c3", "key": "references"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "cbfb0f962bea984d2fb7bd86b67833b4", "key": "published"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "54720f019a90bcc4b359f3362e69b421", "key": "cvelist"}, {"hash": "cbfb0f962bea984d2fb7bd86b67833b4", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "bulletinFamily": "NVD", "cpe": [], "assessment": {"system": "", "name": "", "href": ""}, "history": [], "id": "CVE-2014-9487", "type": "cve", "description": "The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053.", "title": "CVE-2014-9487", "cvss": {"score": 0.0, "vector": "NONE"}, "objectVersion": "1.3", "cvelist": ["CVE-2014-9487"], "viewCount": 2, "published": "2017-10-17T10:29:00", "references": ["http://www.openwall.com/lists/oss-security/2015/01/03/13", "https://security.gentoo.org/glsa/201502-04", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html", "https://bugzilla.redhat.com/show_bug.cgi?id=1175828"], "reporter": "NVD", "scanner": [], "modified": "2017-10-17T10:29:00", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9487"}, "lastseen": "2017-10-18T10:45:49", "edition": 2, "differentElements": ["cvss", "modified", "cpe"]}], "objectVersion": "1.3", "cvelist": ["CVE-2014-9487"], "published": "2017-10-17T10:29:00", "references": ["http://www.openwall.com/lists/oss-security/2015/01/03/13", "https://security.gentoo.org/glsa/201502-04", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html", "https://bugzilla.redhat.com/show_bug.cgi?id=1175828"], "reporter": "NVD", "scanner": [], "modified": "2017-11-08T12:09:59", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9487"}

{"openvas": [{"lastseen": "2018-09-01T23:40:37", "references": ["http://www.openwall.com/lists/oss-security/2015/01/03/13", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html", "https://bugzilla.redhat.com/show_bug.cgi?id=1175828"], "pluginID": "1361412562310113047", "description": "The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.", "edition": 3, "reporter": "Copyright (C) 2017 Greenbone Networks GmbH", "published": "2017-11-09T00:00:00", "title": "MediaWiki XXE Vulnerability (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Web application abuses", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-9487"], "modified": "2017-11-09T00:00:00", "id": "OPENVAS:1361412562310113047", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310113047", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_mediawiki_xxe_vuln_win.nasl 7713 2017-11-09 11:51:35Z jschulte $\n#\n# MediaWiki XXE Vulnerability (Windows)\n#\n# Authors:\n# Jan Philipp Schulte <jan.schulte@greenbone.net>\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, https://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif( description )\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.113047\");\n script_version(\"$Revision: 7713 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-11-09 12:51:35 +0100 (Thu, 09 Nov 2017) $\");\n script_tag(name:\"creation_date\", value:\"2017-11-09 12:50:51 +0100 (Thu, 09 Nov 2017)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_tag(name:\"qod_type\", value:\"remote_banner\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_cve_id(\"CVE-2014-9487\");\n\n script_name(\"MediaWiki XXE Vulnerability (Windows)\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"secpod_mediawiki_detect.nasl\", \"os_detection.nasl\");\n script_require_ports(\"Services/www\", 80);\n script_mandatory_keys(\"mediawiki/installed\", \"Host/runs_windows\");\n\n script_tag(name:\"summary\", value:\"The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.\");\n script_tag(name:\"vuldetect\", value:\"The script checks if the vulnerable version is installed on the host.\");\n script_tag(name:\"solution\", value:\"Upgrade MediaWiki to 1.24.1, 1.23.8, 1.22.15 or 1.19.23 respectively.\");\n\n script_xref(name:\"URL\", value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1175828\");\n script_xref(name:\"URL\", value:\"http://www.openwall.com/lists/oss-security/2015/01/03/13\");\n script_xref(name:\"URL\", value:\"https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html\");\n\n exit( 0 );\n}\n\nCPE = \"cpe:/a:mediawiki:mediawiki\";\n\ninclude( \"host_details.inc\" );\ninclude( \"version_func.inc\" );\n\nif( ! port = get_app_port( cpe: CPE ) ) exit( 0 );\nif( ! version = get_app_version( cpe: CPE, port: port ) ) exit( 0 );\n\nif( version_is_equal( version: version, test_version: \"1.24.0\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.24.1\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.23.0\", test_version2: \"1.23.7\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.23.8\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.22.0\", test_version2: \"1.22.14\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.22.15\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.19.0\", test_version2: \"1.19.22\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.19.23\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nexit( 99 );\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-09-01T23:41:56", "references": ["http://www.openwall.com/lists/oss-security/2015/01/03/13", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html", "https://bugzilla.redhat.com/show_bug.cgi?id=1175828"], "pluginID": "1361412562310113046", "description": "The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.", "edition": 3, "reporter": "Copyright (C) 2017 Greenbone Networks GmbH", "published": "2017-11-09T00:00:00", "title": "MediaWiki XXE Vulnerability (Linux)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Web application abuses", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-9487"], "modified": "2017-11-09T00:00:00", "id": "OPENVAS:1361412562310113046", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310113046", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_mediawiki_xxe_vuln_lin.nasl 7713 2017-11-09 11:51:35Z jschulte $\n#\n# MediaWiki XXE Vulnerability (Linux)\n#\n# Authors:\n# Jan Philipp Schulte <jan.schulte@greenbone.net>\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, https://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif( description )\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.113046\");\n script_version(\"$Revision: 7713 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-11-09 12:51:35 +0100 (Thu, 09 Nov 2017) $\");\n script_tag(name:\"creation_date\", value:\"2017-11-09 12:50:51 +0100 (Thu, 09 Nov 2017)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_tag(name:\"qod_type\", value:\"remote_banner_unreliable\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_cve_id(\"CVE-2014-9487\");\n\n script_name(\"MediaWiki XXE Vulnerability (Linux)\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"secpod_mediawiki_detect.nasl\", \"os_detection.nasl\");\n script_require_ports(\"Services/www\", 80);\n script_mandatory_keys(\"mediawiki/installed\", \"Host/runs_unixoide\");\n\n script_tag(name:\"summary\", value:\"The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.\");\n script_tag(name:\"vuldetect\", value:\"The script checks if the vulnerable version is installed on the host.\");\n script_tag(name:\"solution\", value:\"Upgrade MediaWiki to 1.24.1, 1.23.8, 1.22.15 or 1.19.23 respectively.\");\n\n script_xref(name:\"URL\", value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1175828\");\n script_xref(name:\"URL\", value:\"http://www.openwall.com/lists/oss-security/2015/01/03/13\");\n script_xref(name:\"URL\", value:\"https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html\");\n\n exit( 0 );\n}\n\nCPE = \"cpe:/a:mediawiki:mediawiki\";\n\ninclude( \"host_details.inc\" );\ninclude( \"version_func.inc\" );\n\nif( ! port = get_app_port( cpe: CPE ) ) exit( 0 );\nif( ! version = get_app_version( cpe: CPE, port: port ) ) exit( 0 );\n\nif( version_is_equal( version: version, test_version: \"1.24.0\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.24.1\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.23.0\", test_version2: \"1.23.7\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.23.8\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.22.0\", test_version2: \"1.22.14\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.22.15\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nif( version_in_range( version: version, test_version: \"1.19.0\", test_version2: \"1.19.22\" ) ) {\n report = report_fixed_ver( installed_version: version, fixed_version: \"1.19.23\" );\n security_message( data: report, port: port );\n exit( 0 );\n}\n\nexit( 99 );\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-09-28T18:25:12", "references": ["https://security.gentoo.org/glsa/201502-04"], "pluginID": "1361412562310121343", "description": "Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201502-04", "edition": 6, "reporter": "Eero Volotinen", "published": "2015-09-29T00:00:00", "title": "Gentoo Security Advisory GLSA 201502-04", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-9476", "CVE-2014-9479", "CVE-2014-2244", "CVE-2014-9477", "CVE-2014-5243", "CVE-2014-5241", "CVE-2014-2242", "CVE-2014-9487", "CVE-2014-5242", "CVE-2014-7199", "CVE-2014-1610", "CVE-2013-6453", "CVE-2014-9277", "CVE-2013-6472", "CVE-2014-9481", "CVE-2014-2243", "CVE-2014-9475", "CVE-2014-9507", "CVE-2013-6452", "CVE-2014-9478", "CVE-2014-2665", "CVE-2014-9276", "CVE-2013-6454", "CVE-2014-2853", "CVE-2013-6451", "CVE-2014-7295", "CVE-2014-9480"], "modified": "2018-09-28T00:00:00", "id": "OPENVAS:1361412562310121343", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310121343", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: glsa-201502-04.nasl 11671 2018-09-28 10:44:05Z cfischer $\n#\n# Gentoo Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.121343\");\n script_version(\"$Revision: 11671 $\");\n script_tag(name:\"creation_date\", value:\"2015-09-29 11:28:28 +0300 (Tue, 29 Sep 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 12:44:05 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Gentoo Security Advisory GLSA 201502-04\");\n script_tag(name:\"insight\", value:\"Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers and MediaWiki announcement referenced below for details.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://security.gentoo.org/glsa/201502-04\");\n script_cve_id(\"CVE-2013-6451\", \"CVE-2013-6452\", \"CVE-2013-6453\", \"CVE-2013-6454\", \"CVE-2013-6472\", \"CVE-2014-1610\", \"CVE-2014-2242\", \"CVE-2014-2243\", \"CVE-2014-2244\", \"CVE-2014-2665\", \"CVE-2014-2853\", \"CVE-2014-5241\", \"CVE-2014-5242\", \"CVE-2014-5243\", \"CVE-2014-7199\", \"CVE-2014-7295\", \"CVE-2014-9276\", \"CVE-2014-9277\", \"CVE-2014-9475\", \"CVE-2014-9476\", \"CVE-2014-9477\", \"CVE-2014-9478\", \"CVE-2014-9479\", \"CVE-2014-9480\", \"CVE-2014-9481\", \"CVE-2014-9487\", \"CVE-2014-9507\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/gentoo\", \"ssh/login/pkg\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Gentoo Linux Local Security Checks https://security.gentoo.org/glsa/201502-04\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Gentoo Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-gentoo.inc\");\n\nres = \"\";\nreport = \"\";\n\nif((res=ispkgvuln(pkg:\"www-apps/mediawiki\", unaffected: make_list(\"ge 1.23.8\"), vulnerable: make_list() )) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"www-apps/mediawiki\", unaffected: make_list(\"ge 1.22.15\"), vulnerable: make_list() )) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"www-apps/mediawiki\", unaffected: make_list(\"ge 1.19.23\"), vulnerable: make_list() )) != NULL) {\n\n report += res;\n}\nif((res=ispkgvuln(pkg:\"www-apps/mediawiki\", unaffected: make_list(), vulnerable: make_list(\"lt 1.23.8\"))) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "gentoo": [{"lastseen": "2016-09-06T19:46:30", "references": ["https://bugs.gentoo.org/show_bug.cgi?id=532920", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-7295", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6453", "https://bugs.gentoo.org/show_bug.cgi?id=498064", "https://bugs.gentoo.org/show_bug.cgi?id=518608", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9477", "https://bugs.gentoo.org/show_bug.cgi?id=503012", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9277", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6454", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9487", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9479", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2853", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-5241", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-5243", "https://bugs.gentoo.org/show_bug.cgi?id=499632", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6451", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2244", "https://bugs.gentoo.org/show_bug.cgi?id=506018", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6472", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9480", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2665", "https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-June/000155.html", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9481", "https://bugs.gentoo.org/show_bug.cgi?id=523852", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1610", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9478", "https://bugs.gentoo.org/show_bug.cgi?id=524364", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9507", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2243", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6452", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9476", "https://bugs.gentoo.org/show_bug.cgi?id=515138", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-5242", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-7199", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9475", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-2242", "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9276"], "affectedPackage": [{"OS": "Gentoo", "OSVersion": "any", "packageVersion": "1.23.8", "arch": "all", "packageFilename": "UNKNOWN", "packageName": "www-apps/mediawiki", "operator": "lt"}], "edition": 1, "description": "### Background\n\nMediaWiki is a collaborative editing software used by large projects such as Wikipedia. \n\n### Description\n\nMultiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers and MediaWiki announcement referenced below for details. \n\n### Impact\n\nA remote attacker may be able to execute arbitrary code with the privileges of the process, create a Denial of Service condition, obtain sensitive information, bypass security restrictions, and inject arbitrary web script or HTML. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll MediaWiki 1.23 users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-apps/mediawiki-1.23.8\"\n \n\nAll MediaWiki 1.22 users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-apps/mediawiki-1.22.15\"\n \n\nAll MediaWiki 1.19 users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-apps/mediawiki-1.19.23\"", "reporter": "Gentoo Foundation", "published": "2015-02-07T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "gentoo", "title": "MediaWiki: Multiple vulnerabilities", "bulletinFamily": "unix", "cvelist": ["CVE-2014-9476", "CVE-2014-9479", "CVE-2014-2244", "CVE-2014-9477", "CVE-2014-5243", "CVE-2014-5241", "CVE-2014-2242", "CVE-2014-9487", "CVE-2014-5242", "CVE-2014-7199", "CVE-2014-1610", "CVE-2013-6453", "CVE-2014-9277", "CVE-2013-6472", "CVE-2014-9481", "CVE-2014-2243", "CVE-2014-9475", "CVE-2014-9507", "CVE-2013-6452", "CVE-2014-9478", "CVE-2014-2665", "CVE-2014-9276", "CVE-2013-6454", "CVE-2014-2853", "CVE-2013-6451", "CVE-2014-7295", "CVE-2014-9480"], "modified": "2015-02-07T00:00:00", "id": "GLSA-201502-04", "href": "https://security.gentoo.org/glsa/201502-04", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "nessus": [{"lastseen": "2018-09-01T23:38:01", "references": ["https://security.gentoo.org/glsa/201502-04", "http://www.nessus.org/u?4ef35312"], "pluginID": "81227", "description": "The remote host is affected by the vulnerability described in GLSA-201502-04 (MediaWiki: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers and MediaWiki announcement referenced below for details.\n Impact :\n\n A remote attacker may be able to execute arbitrary code with the privileges of the process, create a Denial of Service condition, obtain sensitive information, bypass security restrictions, and inject arbitrary web script or HTML.\n Workaround :\n\n There is no known workaround at this time.", "edition": 5, "reporter": "Tenable", "published": "2015-02-09T00:00:00", "title": "GLSA-201502-04 : MediaWiki: Multiple vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Gentoo Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2014-9476", "CVE-2014-9479", "CVE-2014-2244", "CVE-2014-9477", "CVE-2014-5243", "CVE-2014-5241", "CVE-2014-2242", "CVE-2014-9487", "CVE-2014-5242", "CVE-2014-7199", "CVE-2014-1610", "CVE-2013-6453", "CVE-2014-9277", "CVE-2013-6472", "CVE-2014-9481", "CVE-2014-2243", "CVE-2014-9475", "CVE-2014-9507", "CVE-2013-6452", "CVE-2014-9478", "CVE-2014-2665", "CVE-2014-9276", "CVE-2013-6454", "CVE-2014-2853", "CVE-2013-6451", "CVE-2014-7295", "CVE-2014-9480"], "modified": "2018-01-26T00:00:00", "cpe": ["cpe:/o:gentoo:linux", "p-cpe:/a:gentoo:linux:mediawiki"], "id": "GENTOO_GLSA-201502-04.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=81227", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Gentoo Linux Security Advisory GLSA 201502-04.\n#\n# The advisory text is Copyright (C) 2001-2018 Gentoo Foundation, Inc.\n# and licensed under the Creative Commons - Attribution / Share Alike \n# license. See http://creativecommons.org/licenses/by-sa/3.0/\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(81227);\n script_version(\"$Revision: 1.3 $\");\n script_cvs_date(\"$Date: 2018/01/26 17:15:57 $\");\n\n script_cve_id(\"CVE-2013-6451\", \"CVE-2013-6452\", \"CVE-2013-6453\", \"CVE-2013-6454\", \"CVE-2013-6472\", \"CVE-2014-1610\", \"CVE-2014-2242\", \"CVE-2014-2243\", \"CVE-2014-2244\", \"CVE-2014-2665\", \"CVE-2014-2853\", \"CVE-2014-5241\", \"CVE-2014-5242\", \"CVE-2014-5243\", \"CVE-2014-7199\", \"CVE-2014-7295\", \"CVE-2014-9276\", \"CVE-2014-9277\", \"CVE-2014-9475\", \"CVE-2014-9476\", \"CVE-2014-9477\", \"CVE-2014-9478\", \"CVE-2014-9479\", \"CVE-2014-9480\", \"CVE-2014-9481\", \"CVE-2014-9487\", \"CVE-2014-9507\");\n script_xref(name:\"GLSA\", value:\"201502-04\");\n\n script_name(english:\"GLSA-201502-04 : MediaWiki: Multiple vulnerabilities\");\n script_summary(english:\"Checks for updated package(s) in /var/db/pkg\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Gentoo host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote host is affected by the vulnerability described in GLSA-201502-04\n(MediaWiki: Multiple vulnerabilities)\n\n Multiple vulnerabilities have been discovered in MediaWiki. Please\n review the CVE identifiers and MediaWiki announcement referenced below\n for details.\n \nImpact :\n\n A remote attacker may be able to execute arbitrary code with the\n privileges of the process, create a Denial of Service condition, obtain\n sensitive information, bypass security restrictions, and inject arbitrary\n web script or HTML.\n \nWorkaround :\n\n There is no known workaround at this time.\"\n );\n # https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-June/000155.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4ef35312\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security.gentoo.org/glsa/201502-04\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"All MediaWiki 1.23 users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=www-apps/mediawiki-1.23.8'\n All MediaWiki 1.22 users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=www-apps/mediawiki-1.22.15'\n All MediaWiki 1.19 users should upgrade to the latest version:\n # emerge --sync\n # emerge --ask --oneshot --verbose '>=www-apps/mediawiki-1.19.23'\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_core\", value:\"true\");\n script_set_attribute(attribute:\"d2_elliot_name\", value:\"MediaWiki thumb.php page Parameter Remote Shell Command Injection\");\n script_set_attribute(attribute:\"exploit_framework_d2_elliot\", value:\"true\");\n script_set_attribute(attribute:\"metasploit_name\", value:'MediaWiki Thumb.php Remote Command Execution');\n script_set_attribute(attribute:\"exploit_framework_metasploit\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:gentoo:linux:mediawiki\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:gentoo:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/02/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/02/09\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2018 Tenable Network Security, Inc.\");\n script_family(english:\"Gentoo Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Gentoo/release\", \"Host/Gentoo/qpkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"qpkg.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Gentoo/release\")) audit(AUDIT_OS_NOT, \"Gentoo\");\nif (!get_kb_item(\"Host/Gentoo/qpkg-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (qpkg_check(package:\"www-apps/mediawiki\", unaffected:make_list(\"ge 1.23.8\", \"rge 1.22.15\", \"rge 1.19.23\"), vulnerable:make_list(\"lt 1.23.8\"))) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:qpkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = qpkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"MediaWiki\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}