MediaWiki 'thumb.php' Security Bypass Vulnerability

Bugtraq ID:	38617
Class:	Access Validation Error
CVE:	CVE-2010-1190
Remote:	Yes
Local:	No
Published:	Mar 09 2010 12:00AM
Updated:	Apr 13 2015 09:44PM
Credit:	Tim Starling
Vulnerable:	S.u.S.E. openSUSE 11.0 MediaWiki MediaWiki 1.15.1 MediaWiki MediaWiki 1.15 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	MediaWiki MediaWiki 1.15.2

MediaWiki 'thumb.php' Security Bypass Vulnerability

MediaWiki is prone to a security-bypass vulnerability because it fails to properly restrict access to restricted content.

An attacker can exploit this issue to bypass intended security measures to view restricted content in private wikis.

Versions after MediaWiki 1.15 and prior to MediaWiki 1.15.2 are vulnerable.

MediaWiki 'thumb.php' Security Bypass Vulnerability

Attackers can exploit this issue via a browser.

MediaWiki 'thumb.php' Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian mediawiki-math_1.12.0-2lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_hppa.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 ia-64

• Debian mediawiki-math_1.12.0-2lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_ia64.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 m68k

• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 arm

• Debian mediawiki-math_1.12.0-2lenny4_arm.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_arm.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 armel

• Debian mediawiki-math_1.12.0-2lenny4_armel.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_armel.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0

• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 amd64

• Debian mediawiki-math_1.12.0-2lenny4_amd64.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_amd64.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 alpha

• Debian mediawiki-math_1.12.0-2lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_alpha.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 ia-32

• Debian mediawiki-math_1.12.0-2lenny4_i386.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_i386.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 mips

• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 s/390

• Debian mediawiki-math_1.12.0-2lenny4_s390.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_s390.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 mipsel

• Debian mediawiki-math_1.12.0-2lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_mipsel.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 powerpc

• Debian mediawiki-math_1.12.0-2lenny4_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_powerpc.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

Debian Linux 5.0 sparc

• Debian mediawiki-math_1.12.0-2lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki-mat h_1.12.0-2lenny4_sparc.deb


• Debian mediawiki_1.12.0-2lenny4_all.deb
  http://security.debian.org/pool/updates/main/m/mediawiki/mediawiki_1.1 2.0-2lenny4_all.deb

MediaWiki MediaWiki 1.15

• MediaWiki mediawiki-1.15.2.tar.gz
  http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.2.tar.gz

MediaWiki MediaWiki 1.15.1

• MediaWiki mediawiki-1.15.2.tar.gz
  http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.2.tar.gz

MediaWiki 'thumb.php' Security Bypass Vulnerability

References:

• [MediaWiki-announce] MediaWiki security update: 1.15.2 (MediaWiki)
  
• MediaWiki Homepage (MediaWiki)