SB2012071101 - Multiple vulnerabilities in Moodle

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2012071101

SB2012071101 - Multiple vulnerabilities in Moodle

Published: July 11, 2012 Updated: January 16, 2023

Security Bulletin ID SB2012071101
Severity
Medium
Patch available
YES
Number of vulnerabilities 10
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 60% Low 40%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 10 secuirty vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2011-4304)

The vulnerability allows a remote #AU# to gain access to sensitive information.

The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.


2) Cross-site scripting (CVE-ID: CVE-2011-4307)

Vulnerability allows a remote attacker to perform XSS attacks.

The vulnerability is caused by an input validation error in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 when processing section parameter. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim's browser in security context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.


3) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2011-4308)

The vulnerability allows a remote #AU# to gain access to sensitive information.

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.


4) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2011-4309)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.


5) Cross-site request forgery (CVE-ID: CVE-2011-4298)

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.


6) Cross-site scripting (CVE-ID: CVE-2011-4299)

Vulnerability allows a remote attacker to perform Cross-site scripting attacks.

An input validation error exists in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2. A remote authenticated attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim's browser in security context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.


7) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2011-4300)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.


8) Input validation error (CVE-ID: CVE-2011-4301)

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.


9) Input validation error (CVE-ID: CVE-2011-4302)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.


10) Cryptographic issues (CVE-ID: CVE-2011-4303)

The vulnerability allows a remote non-authenticated attacker to manipulate data.

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.


Remediation

Install update from vendor's website.

References