Test Kennung:	1.3.6.1.4.1.25623.1.0.131161
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0486)
Zusammenfassung:	The remote host is missing an update for the 'mediawiki' package(s) announced via the MGASA-2015-0486 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mediawiki' package(s) announced via the MGASA-2015-0486 advisory. Vulnerability Insight: Updated mediawiki packages fix security vulnerabilities: In MediaWiki before 1.23.12, an XSS vector exists when MediaWiki is configured with a non-standard configuration, from wikitext when $wgArticlePath='$1' (CVE-2015-8622). In MediaWiki before 1.23.12, tokens were being compared as strings, which could allow a timing attack (CVE-2015-8623, CVE-2015-8624). In MediaWiki before 1.23.12, parameters passed to the curl library were not sanitized, which could cause curl to upload files from the webserver to an attacker when POST variable starts with '@' (CVE-2015-8625). In MediaWiki before 1.23.12, the password reset token could be shorter than the minimum required password length (CVE-2015-8626). In MediaWiki before 1.23.12, blocking IP addresses with zero-padded octets resulted in a failure to block the IP address (CVE-2015-8627). In MediaWiki before 1.23.12, a combination of Special:MyPage redirects and pagecounts allows an external site to know the wikipedia login of an user (CVE-2015-8628). Affected Software/OS: 'mediawiki' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8622 https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html http://www.openwall.com/lists/oss-security/2015/12/21/8 http://www.openwall.com/lists/oss-security/2015/12/23/7 Common Vulnerability Exposure (CVE) ID: CVE-2015-8623 Common Vulnerability Exposure (CVE) ID: CVE-2015-8624 Common Vulnerability Exposure (CVE) ID: CVE-2015-8625 Common Vulnerability Exposure (CVE) ID: CVE-2015-8626 Common Vulnerability Exposure (CVE) ID: CVE-2015-8627 Common Vulnerability Exposure (CVE) ID: CVE-2015-8628
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.