CVE-2005-0536: Medium severity MediaWiki MediaWiki vulnerability
Published Feb 24, 2005
·Updated
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
Affected Software
17 affected components
MediaWiki MediaWiki=1.3.5
MediaWiki MediaWiki=1.3.6
MediaWiki MediaWiki=1.4_beta6
MediaWiki MediaWiki=1.4_beta3
MediaWiki MediaWiki=1.3.10
MediaWiki MediaWiki=1.3.4
MediaWiki MediaWiki=1.3.9
MediaWiki MediaWiki=1.4_beta4
MediaWiki MediaWiki=1.3.0
MediaWiki MediaWiki=1.4_beta1
MediaWiki MediaWiki=1.3.3
MediaWiki MediaWiki=1.3.1
MediaWiki MediaWiki=1.3.7
MediaWiki MediaWiki=1.3.8
MediaWiki MediaWiki=1.3.2
MediaWiki MediaWiki=1.4_beta2
MediaWiki MediaWiki=1.4_beta5
Remediation
Patch Available
Patch Available
Patch Available
Event History
Feb 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0536?
CVE-2005-0536 has a high severity level due to its potential to allow remote attackers to delete arbitrary files.
2
How do I fix CVE-2005-0536?
To fix CVE-2005-0536, you should upgrade to MediaWiki version 1.3.11 or later.
3
Which versions of MediaWiki are affected by CVE-2005-0536?
CVE-2005-0536 affects MediaWiki versions 1.3.0 to 1.3.10 and 1.4 beta before 1.4 rc1.
4
What kind of attack does CVE-2005-0536 enable?
CVE-2005-0536 enables directory traversal attacks that can lead to file deletion or file existence disclosure.
5
Is CVE-2005-0536 a common vulnerability?
CVE-2005-0536 is a known vulnerability in older versions of MediaWiki and has been exploited in the past.