USN-791-2: Moodle vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-791-2: Moodle vulnerability
# 1  
Old 06-24-2009
USN-791-2: Moodle vulnerability

Referenced CVEs:
CVE-2009-1171


Description:
=========================================================== Ubuntu Security Notice USN-791-2 June 24, 2009 moodle vulnerability CVE-2009-1171 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 9.04: moodle 1.9.4.dfsg-0ubuntu1.1 After a standard system upgrade you need to access the Moodle instance and accept the database update to clear any invalid cached data. Details follow: Christian Eibl discovered that the TeX filter in Moodle allowed any function to be used. An authenticated remote attacker could post a specially crafted TeX formula to execute arbitrary TeX functions, potentially reading any file accessible to the web server user, leading to a loss of privacy. (CVE-2009-1171, MSA-09-0009)





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
LIBMTP_folder_struct(3) 					      libmtp						   LIBMTP_folder_struct(3)

NAME
libmtp - LIBMTP_folder_struct SYNOPSIS
#include <libmtp.h> Data Fields uint32_t folder_id uint32_t parent_id uint32_t storage_id char * name LIBMTP_folder_t * sibling LIBMTP_folder_t * child Detailed Description MTP Folder structure Examples: delfile.c, folders.c, getfile.c, newfolder.c, sendfile.c, and sendtr.c. Field Documentation LIBMTP_folder_t* LIBMTP_folder_struct::child Child folder or NULL if no children Examples: folders.c. Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Find_Folder(), and LIBMTP_Get_Folder_List_For_Storage(). uint32_t LIBMTP_folder_struct::folder_id Unique folder ID Examples: folders.c. Referenced by LIBMTP_Find_Folder(), LIBMTP_Get_Folder_List_For_Storage(), LIBMTP_new_folder_t(), and LIBMTP_Set_Folder_Name(). char* LIBMTP_folder_struct::name Name of folder Examples: folders.c. Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Get_Folder_List_For_Storage(), and LIBMTP_Set_Folder_Name(). uint32_t LIBMTP_folder_struct::parent_id ID of parent folder Referenced by LIBMTP_Get_Folder_List_For_Storage(). LIBMTP_folder_t* LIBMTP_folder_struct::sibling Next folder at same level or NULL if no more Examples: folders.c. Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Find_Folder(), and LIBMTP_Get_Folder_List_For_Storage(). uint32_t LIBMTP_folder_struct::storage_id ID of storage holding this folder Referenced by LIBMTP_Get_Folder_List_For_Storage(). Author Generated automatically by Doxygen for libmtp from the source code. Version 1.1.3 Sun Feb 17 2013 LIBMTP_folder_struct(3)