PT-2014-4255 · Wikimedia+1 · Mediawiki+1

Published 2014-01-30 · Updated 2016-05-25 · CVE-2014-1610

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.19.x through 1.19.10 MediaWiki versions 1.21.x through 1.21.4 MediaWiki versions 1.22.x through 1.22.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in certain parameters, such as the page parameter to "includes/media/DjVu.php" and the w parameter (also known as the width field) to "thumb.php", which is not properly handled by "includes/media/PdfHandler body.php".

Recommendations For MediaWiki versions 1.19.x through 1.19.10, update to version 1.19.11 or later. For MediaWiki versions 1.21.x through 1.21.4, update to version 1.21.5 or later. For MediaWiki versions 1.22.x through 1.22.1, update to version 1.22.2 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2014-1172

CVE-2014-1610

DSA-2891-1

MGASA-2014-0113

Affected Products

Alt Linux

Mediawiki

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mediawiki_thumb.rb · Exploit
• 🔥 https://exploit-db.com/exploits/31329 · Exploit
• 🔥 https://exploit-db.com/exploits/31767 · Exploit
• 🔥 http://exploit-db.com/exploits/31329 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4574 · Security Note
• https://gerrit.wikimedia.org/r/#/c/110069 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1172 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4567 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4570 · Security Note
• http://secunia.com/advisories/56695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-1610 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-1610 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-1610 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127948.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6455 · Security Note