CVEvulnerability
CVE-2009-4301
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
Affected configurations
• moodle moodle 1.8.1
• moodle moodle 1.8.2
• moodle moodle 1.8.3
• moodle moodle 1.8.4
• moodle moodle 1.8.5
• moodle moodle 1.8.7
• moodle moodle 1.8.8
• moodle moodle 1.8.9
• moodle moodle 1.8.10
• moodle moodle 1.9.1
• moodle moodle 1.9.2
• moodle moodle 1.9.3
• moodle moodle 1.9.4
• moodle moodle 1.9.5
• moodle moodle 1.9.6
Related
Weakness · not in database (1)
References
- http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11 Patch
- http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.9.2.7&r2=1.9.2.8 Patch
- http://docs.moodle.org/en/Moodle_1.8.11_release_notes Patch
- http://docs.moodle.org/en/Moodle_1.9.7_release_notes Patch
- http://moodle.org/mod/forum/discuss.php?d=139106 Patch, Vendor Advisory
- http://secunia.com/advisories/37614 Vendor Advisory
- http://www.securityfocus.com/bid/37244 Patch
- http://www.vupen.com/english/advisories/2009/3455 Vendor Advisory
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html www.redhat.com
- http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11 Patch
- http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.9.2.7&r2=1.9.2.8 Patch
- http://docs.moodle.org/en/Moodle_1.8.11_release_notes Patch
- http://docs.moodle.org/en/Moodle_1.9.7_release_notes Patch
- http://moodle.org/mod/forum/discuss.php?d=139106 Patch, Vendor Advisory
- http://secunia.com/advisories/37614 Vendor Advisory
- http://www.securityfocus.com/bid/37244 Patch
- http://www.vupen.com/english/advisories/2009/3455 Vendor Advisory
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html www.redhat.com