Gentoo Security Advisory GLSA 201206-09 (MediaWiki) Network Vulnerability

Summary

The remote host is missing updates announced in advisory GLSA 201206-09.

Solution

All MediaWiki users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/mediawiki-1.18.2' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201206-09 http://bugs.gentoo.org/show_bug.cgi?id=366685 http://bugs.gentoo.org/show_bug.cgi?id=409513

Insight

Multiple vulnerabilities have been found in MediaWiki, the worst of which leading to remote execution of arbitrary code.

Severity

Classification

CVE	CVE-2010-2787, CVE-2010-2788, CVE-2010-2789, CVE-2011-0003, CVE-2011-0047, CVE-2011-0537, CVE-2011-1579, CVE-2011-1580, CVE-2011-1766, CVE-2012-1578, CVE-2012-1579, CVE-2012-1580, CVE-2012-1581, CVE-2012-1582

CVSS	Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Related Vulnerabilities

Gentoo Security Advisory GLSA 200406-02 (tripwire)
Gentoo Security Advisory GLSA 200403-11 (Squid)
Gentoo Security Advisory GLSA 200405-09 (proftpd)
Gentoo Security Advisory GLSA 200404-12 (scorched3d)
Gentoo Security Advisory GLSA 200403-01 (libxml)

Take action and discover your vulnerabilities