Several security issues have been fixed in Moodle, a course management system for online learning :

  - CVE-2011-4308 / CVE-2012-0792     Rossiani Wijaya discovered an information leak in     mod/forum/user.php.

  - CVE-2011-4584     MNet authentication didn't prevent a user using 'Login     as' from jumping to a remove MNet SSO.

  - CVE-2011-4585     Darragh Enright discovered that the change password form     was send in over plain HTTP even if httpslogin was set     to 'true'.

  - CVE-2011-4586     David Michael Evans and German Sanchez Gances discovered     CRLF injection/HTTP response splitting vulnerabilities     in the Calendar module.

  - CVE-2011-4587     Stephen Mc Guiness discovered empty passwords could be     entered in some circumstances.

  - CVE-2011-4588     Patrick McNeill discovered that IP address restrictions     could be bypassed in MNet.

  - CVE-2012-0796     Simon Coggins discovered that additional information     could be injected into mail headers.

  - CVE-2012-0795     John Ehringer discovered that email addresses were     insufficiently validated.

  - CVE-2012-0794     Rajesh Taneja discovered that cookie encryption used a     fixed key.

  - CVE-2012-0793     Eloy Lafuente discovered that profile images were     insufficiently protected. A new configuration option     'forceloginforprofileimages' was introduced for that.

オンライン学習のコース管理システムである Moodle で、複数のセキュリティ問題が修正されました：

- CVE-2011-4308/CVE-2012-0792 Rossiani Wijaya 氏は、mod/forum/user.php で情報漏洩を発見しました。

- CVE-2011-4584 MNet 認証は、「Login as」を使用するユーザーが、リモート MNet SSO に移動することを阻止していませんでした。

- CVE-2011-4585 Darragh Enright 氏は、パスワード変更フォームが、httpslogin が「true」に設定されていても、平文 HTTP で送信されていたことを発見しました。

- CVE-2011-4586 David Michael Evans 氏および German Sanchez Gances 氏は、Calendar モジュールにおいて CRLF インジェクション/HTTP 応答分割の脆弱性を発見しました。

- CVE-2011-4587 Stephen Mc Guiness 氏は、一部の状況において、空のパスワードが入力される可能性があることを発見しました。

- CVE-2011-4588 Patrick McNeill 氏は、IP アドレス制限が MNet でバイパスされる可能性があることを発見しました。

- CVE-2012-0796 Simon Coggins 氏は、追加情報がメールヘッダーに注入される可能性があることを発見しました。

- CVE-2012-0795 John Ehringer 氏は、電子メールアドレスが十分に検証されていないことを発見しました。

- CVE-2012-0794 Rajesh Taneja 氏は、クッキーの暗号化が固定キーを使用していたことを発見しました。

- CVE-2012-0793 Eloy Lafuente 氏は、プロファイル画像が十分に保護されていないことを発見しました。このために、新しい構成オプション「forceloginforprofileimages」が導入されていました。

適用於線上學習的課程管理系統 Moodle 中的數個安全性問題已修正：

- CVE-2011-4308 / CVE-2012-0792 Rossiani Wijaya 在 mod/forum/user.php 中發現一個資訊洩漏情形。

- CVE-2011-4584 MNet 驗證未阻止使用「Login as」的使用者跳躍至移除 MNet SSO。

- CVE-2011-4585 Darragh Enright 發現，即使 httpslogin 設為「true」，仍會透過純 HTTP 傳入變更密碼表單。

- CVE-2011-4586 David Michael Evans 和 German Sanchez Gances 在 Calendar 模組中發現 CRLF 插入/HTTP 回應分割弱點。

- CVE-2011-4587 Stephen Mc Guiness 發現，在某些情況下可輸入空密碼。

- CVE-2011-4588 Patrick McNeill 發現，在 MNet 中可繞過 IP 位址限制。

- CVE-2012-0796 Simon Coggins 發現，在郵件標頭中可插入額外資訊。

- CVE-2012-0795 John Ehringer 發現，電子郵件地址的驗證不足。

- CVE-2012-0794 Rajesh Taneja 發現，Cookie 加密使用固定的金鑰。

- CVE-2012-0793 Eloy Lafuente 發現，設定檔影像受到的保護不足。已針對該問題引入新組態選項「forceloginforprofileimages」。

修复了用于在线学习的课程管理系统 Moodle 中的多个安全问题：

- CVE-2011-4308 / CVE-2012-0792 Rossiani Wijaya 在 mod/forum/user.php 中发现了一个信息泄漏。

- CVE-2011-4584 MNet 认证未阻止使用“Login as”的用户转到远程 MNet SSO。

- CVE-2011-4585 Darragh Enright 发现即使 httpslogin 被设置为“true”也会通过明文 HTTP 发送更改密码表单。

- CVE-2011-4586 David Michael Evans 和 German Sanchez Gances 在 Calendar 模块中发现 CRLF 注入/HTTP 响应拆分漏洞。

- CVE-2011-4587 Stephen Mc Guiness 发现可在某些情况下输入空密码。

- CVE-2011-4588 Patrick McNeill 发现可在 MNet 中绕过 IP 地址限制。

- CVE-2012-0796 Simon Coggins 发现可将附加信息注入邮件标头。

- CVE-2012-0795 John Ehringer 发现电子邮件地址未得到充分验证。

- CVE-2012-0794 Rajesh Taneja 发现 cookie 加密使用固定的密钥。

- CVE-2012-0793 Eloy Lafuente 发现配置文件镜像未得到充分保护。为该情况引入了一个新的配置选项“forceloginforprofileimages”。

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 2.0.x prior to 2.0.5, or 2.1.x prior to 2.1.2 are exposed to the following vulnerabilities :

  - Multiple cross-site request forgery (CSRF) vulnerabilities in 'mod/wiki/' components that allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data. (MSA-11-0027 / CVE-2011-4298)

  - A cross-site scripting (XSS) vulnerability in 'mod/wiki/pagelib.php' that allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment. (MSA-11-0028 / CVE-2011-4299)

  - An information disclosure flaw exists in the 'file_browser' component because it does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file. (MSA-11-0029 / CVE-2011-4300)

  - A security-bypass flaw exists in the Box.net authentication plugin which was being used prior to OAuth-like authentication in Box.net. (MSA-11-0030)

  - A flaw exists in the forms API that allows form values set as constants to be altered when the user submits the form. (MSA-11-0031 / CVE-2011-4301)

  - A security flaw exists due to incorrect handling of openssl_verify() return codes and exposes the server to remote attacks bypassing validation. (MSA-11-0032 / CVE-2011-4302)

  - A security flaw affects the script 'lib/db/upgrade.php' that does not set the correct 'registration_hubs.secret' value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature. (MSA-11-0033 / CVE-2011-4303)

  - The chat functionality allows remote authenticated users to discover the name of any user via a beep operation. Beeping a user would disclose their full name, this also includes deleted users. (MSA-11-0034 / CVE-2011-4304)

  - The parameter '$CFG->usesid' was added previously to allow simpler access, but this setting is now ignored to remove a security-bypass vulnerability that allowed for cookie-less user sessions. (MSA-11-0035)

  - A cross-site scripting (XSS) vulnerability affects the Wiki. Specifically, this affects the 'section' parameter of the script 'mod/wiki/lang/en/wiki.php'. (MSA-11-0039 / CVE-2011-4307)

  - An information disclosure flaw exists in 'mod/forum/user.php' which exposes user names to any authenticated members, rather than only students or administrators in the same course. (MSA-11-0040 / CVE-2011-4308)

  - A security-bypass flaw allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL. (MSA-11-0041 / CVE-2011-4309)

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle prior to 1.9.14 are exposed to the following vulnerabilities :

  - A flaw exists in the forms API that allows form values set as constants to be altered when the user submits the form. (MSA-11-0031 / CVE-2011-4301)

  - A security flaw exists due to incorrect handling of openssl_verify() return codes and exposes the server to remote attacks bypassing validation. (MSA-11-0032 / CVE-2011-4302)

  - A denial of service vulnerability exists in the script 'message/refresh.php' because users could change the refresh wait time to zero. This results in an unlimited query which could exhaust system resources, denying access to legitimate users. (MSA-11-0036 / CVE-2011-4305)

  - A cross-site scripting (XSS) vulnerability exists due to lack of input sanitization when editing course sections. Specifically, this affects the 'editsection.html' values directly from user input supplied to data_submitted(). (MSA-11-0037 / CVE-2011-4306)

  - An unspecified SQL injection vulnerability exists when using magic quotes in the SQL query. (MSA-11-0038)

  - An information disclosure flaw exists in 'mod/forum/user.php' which exposes user names to any authenticated members, rather than only students or administrators in the same course. (MSA-11-0040 / CVE-2011-4308)

ID	名稱	產品	系列	已發布	已更新	嚴重性
58172	Debian DSA-2421-1 : moodle - several vulnerabilities	Nessus	Debian Local Security Checks	2012/3/1	2021/1/11	medium
58172	Debian DSA-2421-1 : moodle - 複数の脆弱性	Nessus	Debian Local Security Checks	2012/3/1	2021/1/11	medium
58172	Debian DSA-2421-1 : moodle - 數個弱點	Nessus	Debian Local Security Checks	2012/3/1	2021/1/11	medium
58172	Debian DSA-2421-1：moodle - 多个漏洞	Nessus	Debian Local Security Checks	2012/3/1	2021/1/11	medium
8713	Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities	Nessus Network Monitor	CGI	2015/4/20	2019/3/6	medium
8711	Moodle 1.9.x < 1.9.14 Multiple Vulnerabilities	Nessus Network Monitor	CGI	2015/4/20	2019/3/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium