Lucene search
+L

Fedora Update for mediawiki FEDORA-2014-5684

🗓️ 12 May 2014 00:00:00Reported by Copyright (C) 2014 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 50 Views

Update for mediawiki FEDORA-2014-5684. MediaWiki software supports wiki farms and has features for high-traffic websites

Related
Refs
Code
ReporterTitlePublishedViews
Family
zdt
zdt
MediaWiki <= 1.22.1 PdfHandler Remote Code Execution Exploit
2 Feb 201400:00
zdt
zdt
zdt
MediaWiki <= 1.22.1 PdfHandler Remote Code Execution Exploit
2 Feb 201400:00
zdt
zdt
zdt
MediaWiki Thumb.php Remote Command Execution Exploit
20 Feb 201400:00
zdt
circl
Circl
CVE-2013-6451
28 Jan 202019:37
circl
circl
Circl
CVE-2014-1610
1 Feb 201400:00
circl
checkpoint_advisories
Check Point Advisories
MediaWiki Input Validation Remote Code Execution (CVE-2014-1610)
28 Jan 201400:00
checkpoint_advisories
cve
CVE
CVE-2013-6451
28 Jan 202014:56
cve
cve
CVE
CVE-2013-6452
12 May 201414:00
cve
cve
CVE
CVE-2013-6453
12 May 201414:00
cve
cve
CVE
CVE-2013-6454
12 May 201414:00
cve
Rows per page
###############################################################################
# OpenVAS Vulnerability Test
#
# Fedora Update for mediawiki FEDORA-2014-5684
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (C) 2014 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

include("revisions-lib.inc");

if(description)
{
  script_id(867788);
  script_version("$Revision: 6629 $");
  script_tag(name:"last_modification", value:"$Date: 2017-07-10 08:33:41 +0200 (Mon, 10 Jul 2017) $");
  script_tag(name:"creation_date", value:"2014-05-12 09:11:11 +0530 (Mon, 12 May 2014)");
  script_cve_id("CVE-2014-2853", "CVE-2014-1610", "CVE-2013-6452", "CVE-2013-6451",
                "CVE-2013-6454", "CVE-2013-6453", "CVE-2013-6472");
  script_tag(name:"cvss_base", value:"6.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:S/C:P/I:P/A:P");
  script_name("Fedora Update for mediawiki FEDORA-2014-5684");

  tag_insight = "MediaWiki is the software used for Wikipedia and the other Wikimedia
Foundation websites. Compared to other wikis, it has an excellent
range of features and support for high-traffic websites using multiple
servers

This package supports wiki farms. Read the instructions for creating wiki
instances under /usr/share/doc/mediawiki/README.RPM.
Remember to remove the config dir after completing the configuration.
";

  tag_affected = "mediawiki on Fedora 20";

  tag_solution = "Please Install the Updated Packages.";


  script_tag(name : "affected" , value : tag_affected);
  script_tag(name : "insight" , value : tag_insight);
  script_tag(name : "solution" , value : tag_solution);
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  script_xref(name: "FEDORA", value: "2014-5684");
  script_xref(name: "URL" , value: "https://lists.fedoraproject.org/pipermail/package-announce/2014-May/132655.html");
  script_summary("Check for the Version of mediawiki");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2014 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms");
  exit(0);
}


include("pkg-lib-rpm.inc");

release = get_kb_item("ssh/login/release");

res = "";
if(release == NULL){
  exit(0);
}

if(release == "FC20")
{

  if ((res = isrpmvuln(pkg:"mediawiki", rpm:"mediawiki~1.21.9~1.fc20", rls:"FC20")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99); # Not vulnerable.
  exit(0);
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Jul 2017 00:00Current
6.8Medium risk
Vulners AI Score6.8
EPSS0.42777
50