CVE-2004-1405: High severity mediawiki mediawiki vulnerability
Published Dec 31, 2004
·Updated
MediaWiki 1.3.8 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
Affected Software
12 affected components
MediaWiki MediaWiki=1.3.5
MediaWiki MediaWiki=1.3.6
MediaWiki MediaWiki=1.3
MediaWiki MediaWiki=1.3.10
MediaWiki MediaWiki=1.3.4
MediaWiki MediaWiki=1.3.0
MediaWiki MediaWiki=1.3.3
MediaWiki MediaWiki=1.3.1
MediaWiki MediaWiki=1.3.7
MediaWiki MediaWiki=1.3.11
MediaWiki MediaWiki=1.3.8
MediaWiki MediaWiki=1.3.2
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Feb 12, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1405?
CVE-2004-1405 is considered a critical vulnerability due to potential remote code execution.
2
How do I fix CVE-2004-1405?
To fix CVE-2004-1405, upgrade MediaWiki to the latest version or at least to version 1.3.9 or later.
3
Which versions of MediaWiki are affected by CVE-2004-1405?
CVE-2004-1405 affects MediaWiki versions 1.3.8 and earlier.
4
What type of vulnerability is CVE-2004-1405?
CVE-2004-1405 is a remote code execution vulnerability.
5
Can CVE-2004-1405 be exploited remotely?
Yes, CVE-2004-1405 can be exploited remotely, allowing attackers to upload and execute arbitrary code.