CVE-2009-4301: Medium severity moodle vulnerability
Published Dec 16, 2009
·Updated
mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
Affected Software
15 affected components
Moodle moodle=1.9.4
Moodle moodle=1.9.1
Moodle moodle=1.8.8
Moodle moodle=1.9.6
Moodle moodle=1.8.2
Moodle moodle=1.9.2
Moodle moodle=1.8.5
Moodle moodle=1.8.3
Moodle moodle=1.8.9
Moodle moodle=1.8.7
Moodle moodle=1.8.10
Moodle moodle=1.9.3
Moodle moodle=1.9.5
Moodle moodle=1.8.4
Moodle moodle=1.8.1
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Dec 16, 2009
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4301?
CVE-2009-4301 is considered a medium severity vulnerability due to improper permission checks in Moodle.
2
How do I fix CVE-2009-4301?
To fix CVE-2009-4301, upgrade your Moodle installation to version 1.8.11 or 1.9.7 or later.
3
Which versions of Moodle are affected by CVE-2009-4301?
CVE-2009-4301 affects Moodle versions prior to 1.8.11 and 1.9.7, including versions like 1.8.1 to 1.8.10 and 1.9.1 to 1.9.6.
4
What type of vulnerability is CVE-2009-4301?
CVE-2009-4301 is a remote code execution vulnerability that allows unauthorized execution of MNET functions.
5
Can CVE-2009-4301 be exploited by unauthenticated users?
No, CVE-2009-4301 can only be exploited by remote authenticated servers.