ID CVE-2015-8001 Type cve Reporter cve@mitre.org Modified 2015-11-10T17:50:00
Description
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.
{"openvas": [{"lastseen": "2019-07-17T14:27:20", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8004"], "description": "This host is installed with MediaWiki\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2015-11-25T00:00:00", "id": "OPENVAS:1361412562310806625", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806625", "type": "openvas", "title": "MediaWiki Multiple Vulnerabilities - Nov15 (Windows)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# MediaWiki Multiple Vulnerabilities - Nov15 (Windows)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:mediawiki:mediawiki\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806625\");\n script_version(\"2019-07-05T10:41:31+0000\");\n script_cve_id(\"CVE-2015-8005\", \"CVE-2015-8004\", \"CVE-2015-8003\", \"CVE-2015-8002\",\n \"CVE-2015-8001\");\n script_bugtraq_id(77378, 77375, 77374, 77372);\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 10:41:31 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2015-11-25 16:22:20 +0530 (Wed, 25 Nov 2015)\");\n script_name(\"MediaWiki Multiple Vulnerabilities - Nov15 (Windows)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with MediaWiki\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists due to,\n\n - the chunked upload API (ApiUpload) which does not restrict the uploaded\n data to the claimed file size.\n\n - an error in the application which does not throttle file uploads.\n\n - improper restrict access to revisions.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, gain privileged access and\n have some other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"MediaWiki before 1.23.11, 1.24.x before\n 1.24.4, and 1.25.x before 1.25.3 on Windows\");\n\n script_tag(name:\"solution\", value:\"Upgrade to version 1.23.11 or 1.24.4\n or 1.25.3 or later.\");\n\n script_tag(name:\"qod_type\", value:\"remote_banner\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"http://www.securitytracker.com/id/1034028\");\n script_xref(name:\"URL\", value:\"https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"find_service.nasl\", \"os_detection.nasl\", \"secpod_mediawiki_detect.nasl\");\n script_mandatory_keys(\"mediawiki/installed\", \"Host/runs_windows\");\n script_require_ports(\"Services/www\", 80);\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!http_port = get_app_port(cpe:CPE)){\n exit(0);\n}\n\nif(!http_ver = get_app_version(cpe:CPE, port:http_port)){\n exit(0);\n}\n\nif(version_is_less(version:http_ver, test_version:\"1.23.11\"))\n{\n fix = \"1.23.11\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:http_ver, test_version:\"1.24.0\", test_version2:\"1.24.3\"))\n{\n fix = \"1.24.4\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:http_ver, test_version:\"1.25.0\", test_version2:\"1.25.2\"))\n{\n fix = \"1.25.3\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + http_ver + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(port:http_port, data:report);\n exit(0);\n}\n\nexit(99);", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2019-07-17T14:27:04", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8004"], "description": "This host is installed with MediaWiki\n and is prone to multiple vulnerabilities.", "modified": "2019-07-05T00:00:00", "published": "2015-11-25T00:00:00", "id": "OPENVAS:1361412562310806626", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806626", "type": "openvas", "title": "MediaWiki Multiple Vulnerabilities - Nov15 (Linux)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# MediaWiki Multiple Vulnerabilities - Nov15 (Linux)\n#\n# Authors:\n# Shakeel <bshakeel@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:mediawiki:mediawiki\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806626\");\n script_version(\"2019-07-05T10:41:31+0000\");\n script_cve_id(\"CVE-2015-8005\", \"CVE-2015-8004\", \"CVE-2015-8003\", \"CVE-2015-8002\",\n \"CVE-2015-8001\");\n script_bugtraq_id(77378, 77375, 77374, 77372);\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 10:41:31 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2015-11-25 16:45:17 +0530 (Wed, 25 Nov 2015)\");\n script_name(\"MediaWiki Multiple Vulnerabilities - Nov15 (Linux)\");\n\n script_tag(name:\"summary\", value:\"This host is installed with MediaWiki\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws exists due to,\n\n - the chunked upload API (ApiUpload) which does not restrict the uploaded\n data to the claimed file size.\n\n - an error in the application which does not throttle file uploads.\n\n - improper restrict access to revisions.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation will allow remote\n attackers to conduct denial of service attack, gain privileged access and\n have some other unspecified impact.\");\n\n script_tag(name:\"affected\", value:\"MediaWiki before 1.23.11, 1.24.x before\n 1.24.4, and 1.25.x before 1.25.3 on Linux\");\n\n script_tag(name:\"solution\", value:\"Upgrade to version 1.23.11 or 1.24.4\n or 1.25.3 or later.\");\n\n script_tag(name:\"qod_type\", value:\"remote_banner_unreliable\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_xref(name:\"URL\", value:\"http://www.securitytracker.com/id/1034028\");\n script_xref(name:\"URL\", value:\"https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Web application abuses\");\n script_dependencies(\"find_service.nasl\", \"os_detection.nasl\", \"secpod_mediawiki_detect.nasl\");\n script_mandatory_keys(\"mediawiki/installed\", \"Host/runs_unixoide\");\n script_require_ports(\"Services/www\", 80);\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!http_port = get_app_port(cpe:CPE)){\n exit(0);\n}\n\nif(!http_ver = get_app_version(cpe:CPE, port:http_port)){\n exit(0);\n}\n\nif(version_is_less(version:http_ver, test_version:\"1.23.11\"))\n{\n fix = \"1.23.11\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:http_ver, test_version:\"1.24.0\", test_version2:\"1.24.3\"))\n{\n fix = \"1.24.4\";\n VULN = TRUE ;\n}\n\nelse if(version_in_range(version:http_ver, test_version:\"1.25.0\", test_version2:\"1.25.3\"))\n{\n fix = \"1.25.3\";\n VULN = TRUE ;\n}\n\nif(VULN)\n{\n report = 'Installed version: ' + http_ver + '\\n' +\n 'Fixed version: ' + fix + '\\n';\n security_message(port:http_port, data:report);\n exit(0);\n}\n\nexit(99);", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:35:55", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8004"], "description": "Mageia Linux Local Security Checks mgasa-2015-0421", "modified": "2018-09-28T00:00:00", "published": "2015-11-08T00:00:00", "id": "OPENVAS:1361412562310131120", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310131120", "type": "openvas", "title": "Mageia Linux Local Check: mgasa-2015-0421", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: mgasa-2015-0421.nasl 11692 2018-09-28 16:55:19Z cfischer $\n#\n# Mageia Linux security check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://www.solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.131120\");\n script_version(\"$Revision: 11692 $\");\n script_tag(name:\"creation_date\", value:\"2015-11-08 13:02:15 +0200 (Sun, 08 Nov 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 18:55:19 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Mageia Linux Local Check: mgasa-2015-0421\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name:\"URL\", value:\"https://advisories.mageia.org/MGASA-2015-0421.html\");\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\", \"CVE-2015-8005\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mageia_linux\", \"ssh/login/release\", re:\"ssh/login/release=MAGEIA5\");\n script_category(ACT_GATHER_INFO);\n script_tag(name:\"summary\", value:\"Mageia Linux Local Security Checks mgasa-2015-0421\");\n script_copyright(\"Eero Volotinen\");\n script_family(\"Mageia Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"MAGEIA5\")\n{\nif ((res = isrpmvuln(pkg:\"mediawiki\", rpm:\"mediawiki~1.23.11~1.mga5\", rls:\"MAGEIA5\")) != NULL) {\n security_message(data:res);\n exit(0);\n}\nif (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:36:29", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2015-11-06T00:00:00", "id": "OPENVAS:1361412562310806597", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806597", "type": "openvas", "title": "Fedora Update for mediawiki FEDORA-2015-97", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for mediawiki FEDORA-2015-97\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806597\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-11-06 06:01:04 +0100 (Fri, 06 Nov 2015)\");\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\",\n \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\",\n \"CVE-2015-8009\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for mediawiki FEDORA-2015-97\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mediawiki'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"mediawiki on Fedora 21\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2015-97\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170961.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC21\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC21\")\n{\n\n if ((res = isrpmvuln(pkg:\"mediawiki\", rpm:\"mediawiki~1.24.4~1.fc21\", rls:\"FC21\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:36:56", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2015-11-06T00:00:00", "id": "OPENVAS:1361412562310806583", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310806583", "type": "openvas", "title": "Fedora Update for mediawiki FEDORA-2015-24", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for mediawiki FEDORA-2015-24\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2015 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.806583\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2015-11-06 06:01:15 +0100 (Fri, 06 Nov 2015)\");\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\",\n \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\",\n \"CVE-2015-8009\");\n script_tag(name:\"cvss_base\", value:\"6.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for mediawiki FEDORA-2015-24\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mediawiki'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"mediawiki on Fedora 22\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2015-24\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/pipermail/package-announce/2015-November/171007.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2015 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC22\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC22\")\n{\n\n if ((res = isrpmvuln(pkg:\"mediawiki\", rpm:\"mediawiki~1.25.3~1.fc22\", rls:\"FC22\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}], "fedora": [{"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-8001", "CVE-2015-8002", "CVE-2015-8003", "CVE-2015-8005", "CVE-2015-8006", "CVE-2015-8007", "CVE-2015-8008", "CVE-2015-8009"], "description": "MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances under /usr/share/doc/mediawiki/README.RPM. Remember to remove the config dir after completing the configuration. ", "modified": "2015-11-05T23:27:59", "published": "2015-11-05T23:27:59", "id": "FEDORA:E27226079D0C", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-8001", "CVE-2015-8002", "CVE-2015-8003", "CVE-2015-8005", "CVE-2015-8006", "CVE-2015-8007", "CVE-2015-8008", "CVE-2015-8009"], "description": "MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances under /usr/share/doc/mediawiki/README.RPM. Remember to remove the config dir after completing the configuration. ", "modified": "2015-11-05T22:26:54", "published": "2015-11-05T22:26:54", "id": "FEDORA:E12726047684", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2020-12-21T08:17:53", "bulletinFamily": "unix", "cvelist": ["CVE-2015-8001", "CVE-2015-8002", "CVE-2015-8003", "CVE-2015-8005", "CVE-2015-8006", "CVE-2015-8007", "CVE-2015-8008", "CVE-2015-8009"], "description": "MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances under /usr/share/doc/mediawiki/README.RPM. Remember to remove the config dir after completing the configuration. ", "modified": "2015-11-05T21:50:58", "published": "2015-11-05T21:50:58", "id": "FEDORA:C83AE604BB2E", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}], "freebsd": [{"lastseen": "2019-05-29T18:33:01", "bulletinFamily": "unix", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "description": "\nMediaWiki reports:\n\nWikipedia user RobinHood70 reported two issues in the chunked\n\t upload API. The API failed to correctly stop adding new chunks to\n\t the upload when the reported size was exceeded (T91203), allowing\n\t a malicious users to upload add an infinite number of chunks for a\n\t single file upload. Additionally, a malicious user could upload\n\t chunks of 1 byte for very large files, potentially creating a very\n\t large number of files on the server's filesystem (T91205).\nInternal review discovered that it is not possible to throttle file\n\t uploads.\nInternal review discovered a missing authorization check when\n\t removing suppression from a revision. This allowed users with the\n\t 'viewsuppressed' user right but not the appropriate\n\t 'suppressrevision' user right to unsuppress revisions.\nRichard Stanway from teamliquid.net reported that thumbnails of PNG\n\t files generated with ImageMagick contained the local file path in\n\t the image metadata.\n\n", "edition": 4, "modified": "2015-12-24T00:00:00", "published": "2015-10-16T00:00:00", "id": "B973A763-7936-11E5-A2A1-002590263BF5", "href": "https://vuxml.freebsd.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html", "title": "mediawiki -- multiple vulnerabilities", "type": "freebsd", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}], "nessus": [{"lastseen": "2021-01-12T10:13:55", "description": "https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 18, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-03-04T00:00:00", "title": "Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "modified": "2016-03-04T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mediawiki", "cpe:/o:fedoraproject:fedora:23"], "id": "FEDORA_2015-EC6D598D3D.NASL", "href": "https://www.tenable.com/plugins/nessus/89450", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-ec6d598d3d.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(89450);\n script_version(\"1.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\", \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\", \"CVE-2015-8009\");\n script_xref(name:\"FEDORA\", value:\"2015-ec6d598d3d\");\n\n script_name(english:\"Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1273353\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170979.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ce96bd41\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mediawiki package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mediawiki\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:23\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/03/04\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^23([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 23.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC23\", reference:\"mediawiki-1.25.3-1.fc23\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mediawiki\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2021-01-12T10:13:51", "description": "https://www.mediawiki.org/wiki/Release_notes/1.24#MediaWiki_1.24.4\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 18, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-03-04T00:00:00", "title": "Fedora 21 : mediawiki-1.24.4-1.fc21 (2015-97fe05f788)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "modified": "2016-03-04T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:21", "p-cpe:/a:fedoraproject:fedora:mediawiki"], "id": "FEDORA_2015-97FE05F788.NASL", "href": "https://www.tenable.com/plugins/nessus/89332", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-97fe05f788.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(89332);\n script_version(\"1.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\", \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\", \"CVE-2015-8009\");\n script_xref(name:\"FEDORA\", value:\"2015-97fe05f788\");\n\n script_name(english:\"Fedora 21 : mediawiki-1.24.4-1.fc21 (2015-97fe05f788)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"https://www.mediawiki.org/wiki/Release_notes/1.24#MediaWiki_1.24.4\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1273353\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170961.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?541f4831\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mediawiki.org/wiki/Release_notes/1.24#MediaWiki_1.24.4\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mediawiki package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mediawiki\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:21\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/03/04\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^21([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 21.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC21\", reference:\"mediawiki-1.24.4-1.fc21\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mediawiki\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2021-01-07T10:49:23", "description": "MediaWiki reports :\n\nWikipedia user RobinHood70 reported two issues in the chunked upload\nAPI. The API failed to correctly stop adding new chunks to the upload\nwhen the reported size was exceeded (T91203), allowing a malicious\nusers to upload add an infinite number of chunks for a single file\nupload. Additionally, a malicious user could upload chunks of 1 byte\nfor very large files, potentially creating a very large number of\nfiles on the server's filesystem (T91205).\n\nInternal review discovered that it is not possible to throttle file\nuploads.\n\nInternal review discovered a missing authorization check when removing\nsuppression from a revision. This allowed users with the\n'viewsuppressed' user right but not the appropriate 'suppressrevision'\nuser right to unsuppress revisions.\n\nRichard Stanway from teamliquid.net reported that thumbnails of PNG\nfiles generated with ImageMagick contained the local file path in the\nimage metadata.", "edition": 24, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2015-10-23T00:00:00", "title": "FreeBSD : mediawiki -- multiple vulnerabilities (b973a763-7936-11e5-a2a1-002590263bf5)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "modified": "2015-10-23T00:00:00", "cpe": ["p-cpe:/a:freebsd:freebsd:mediawiki124", "cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:mediawiki123", "p-cpe:/a:freebsd:freebsd:mediawiki125"], "id": "FREEBSD_PKG_B973A763793611E5A2A1002590263BF5.NASL", "href": "https://www.tenable.com/plugins/nessus/86554", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2018 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(86554);\n script_version(\"2.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\", \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\", \"CVE-2015-8009\");\n\n script_name(english:\"FreeBSD : mediawiki -- multiple vulnerabilities (b973a763-7936-11e5-a2a1-002590263bf5)\");\n script_summary(english:\"Checks for updated packages in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote FreeBSD host is missing one or more security-related\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"MediaWiki reports :\n\nWikipedia user RobinHood70 reported two issues in the chunked upload\nAPI. The API failed to correctly stop adding new chunks to the upload\nwhen the reported size was exceeded (T91203), allowing a malicious\nusers to upload add an infinite number of chunks for a single file\nupload. Additionally, a malicious user could upload chunks of 1 byte\nfor very large files, potentially creating a very large number of\nfiles on the server's filesystem (T91205).\n\nInternal review discovered that it is not possible to throttle file\nuploads.\n\nInternal review discovered a missing authorization check when removing\nsuppression from a revision. This allowed users with the\n'viewsuppressed' user right but not the appropriate 'suppressrevision'\nuser right to unsuppress revisions.\n\nRichard Stanway from teamliquid.net reported that thumbnails of PNG\nfiles generated with ImageMagick contained the local file path in the\nimage metadata.\"\n );\n # https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?da85c1ce\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://phabricator.wikimedia.org/T91203\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://phabricator.wikimedia.org/T91205\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://phabricator.wikimedia.org/T91850\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://phabricator.wikimedia.org/T95589\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://phabricator.wikimedia.org/T108616\"\n );\n # http://www.openwall.com/lists/oss-security/2015/10/29/14\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.openwall.com/lists/oss-security/2015/10/29/14\"\n );\n # https://vuxml.freebsd.org/freebsd/b973a763-7936-11e5-a2a1-002590263bf5.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a7ceb1cd\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:mediawiki123\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:mediawiki124\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:mediawiki125\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2015/10/16\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/10/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/10/23\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"mediawiki123<1.23.11\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"mediawiki124<1.24.4\")) flag++;\nif (pkg_test(save_report:TRUE, pkg:\"mediawiki125<1.25.3\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:pkg_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}, {"lastseen": "2021-01-12T10:13:28", "description": "https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 18, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-03-04T00:00:00", "title": "Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2015-8001", "CVE-2015-8005", "CVE-2015-8007", "CVE-2015-8003", "CVE-2015-8002", "CVE-2015-8006", "CVE-2015-8009", "CVE-2015-8008", "CVE-2015-8004"], "modified": "2016-03-04T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mediawiki", "cpe:/o:fedoraproject:fedora:22"], "id": "FEDORA_2015-24FE8B66C9.NASL", "href": "https://www.tenable.com/plugins/nessus/89179", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2015-24fe8b66c9.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(89179);\n script_version(\"2.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2015-8001\", \"CVE-2015-8002\", \"CVE-2015-8003\", \"CVE-2015-8004\", \"CVE-2015-8005\", \"CVE-2015-8006\", \"CVE-2015-8007\", \"CVE-2015-8008\", \"CVE-2015-8009\");\n script_xref(name:\"FEDORA\", value:\"2015-24fe8b66c9\");\n\n script_name(english:\"Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=1273353\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2015-November/171007.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4f1d95c4\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mediawiki.org/wiki/Release_notes/1.25#MediaWiki_1.25.3\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mediawiki package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mediawiki\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:22\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2015/11/05\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/03/04\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^22([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 22.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC22\", reference:\"mediawiki-1.25.3-1.fc22\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mediawiki\");\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}]}
