SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2011-4118

Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC target.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.0
Exploit Score: 6.8
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

SECUNIA-46719

DSA-2334

http://openwall.com/lists/oss-security/2011/11/04/7

http://openwall.com/lists/oss-security/2011/11/04/10

http://mahara.org/interaction/forum/topic.php?id=4138

http://security.debian.org/debian-security/pool/updates/main/m/mahara/mahara_1.2.6-2+squeeze3.debian.tar.gz

https://bugs.launchpad.net/mahara/+bug/884223

https://launchpad.net/mahara/+milestone/1.4.1


30430



423868



247974



909



194654



282