Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5687
HistoryDec 19, 2008 - 12:00 a.m.

CVE-2008-5687

2008-12-1900:00:00
ubuntu.com
ubuntu.com
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

74.7%

MediaWiki 1.11, and other versions before 1.13.3, does not properly protect
against the download of backups of deleted images, which might allow remote
attackers to obtain sensitive information via requests for files in
images/deleted/.

Notes

Author Note
mdeslaur from debian: the CVE id description is wrong, this is fixed in 1.13.3
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmediawiki< 1:1.11.2-2ubuntu0.2UNKNOWN
ubuntu8.10noarchmediawiki< 1:1.12.0-2ubuntu0.2UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

74.7%