PT-2011-2430 · Mediawiki+2 · Mediawiki+2

Happy Melon · Published 2011-02-04 · Updated 2011-02-12 · CVE-2011-0537

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.8.0 through 1.16.2

Description The issue concerns directory traversal vulnerabilities in MediaWiki, specifically in the languages/Language.php and includes/StubObject.php files. These vulnerabilities can be exploited by remote attackers to include and execute arbitrary local PHP files. The exploitation is related to crafted language files and the Language::factory function. The issue is relevant when MediaWiki is running on Windows and possibly Novell Netware.

Recommendations For MediaWiki versions 1.8.0 through 1.16.2, update to version 1.16.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Language::factory function and limiting the ability to upload or modify language files until a patch is applied. Additionally, restrict access to sensitive PHP files to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-0537

Affected Products

Mediawiki

Novell Netware

Windows

References · 10

• http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.2.patch.gz · Patch
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-0537 · Security Note
• http://vupen.com/english/advisories/2011/0273 · Vendor Advisory
• http://osvdb.org/70799 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0537 · Note
• http://openwall.com/lists/oss-security/2011/02/03/3 · Note
• http://openwall.com/lists/oss-security/2011/02/01/4 · Note
• https://bugzilla.wikimedia.org/show_bug.cgi?id=27094 · Note
• http://osvdb.org/70798 · Note