CVE-2012-2244: Medium severity mahara vulnerability
Published Nov 24, 2012
·Updated
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243.
Affected Software
14 affected components
Mahara Mahara=1.4-rc1
Mahara Mahara=1.4-rc2
Mahara Mahara=1.4-rc3
Mahara Mahara=1.4-rc4
Mahara Mahara=1.4.0
Mahara Mahara=1.4.1
Mahara Mahara=1.4.2
Mahara Mahara=1.4.3
Mahara Mahara=1.5-rc1
Mahara Mahara=1.5-rc2
Mahara Mahara=1.5.0
Mahara Mahara=1.5.1
Mahara Mahara=1.5.2
Mahara Mahara=1.5.3
Remediation
Patch Available
Event History
Nov 24, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2244?
CVE-2012-2244 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2012-2244?
To fix CVE-2012-2244, upgrade Mahara to version 1.4.5 or later, or 1.5.4 or later.
3
Which versions of Mahara are affected by CVE-2012-2244?
Mahara versions 1.4.x before 1.4.5 and 1.5.x before 1.5.4 are affected by CVE-2012-2244.
4
Is authentication required to exploit CVE-2012-2244?
Exploitation of CVE-2012-2244 can occur without authentication by leveraging CVE-2012-2243.
5
What can attackers achieve by exploiting CVE-2012-2244?
Attackers can execute arbitrary programs on the server by modifying the path to ClamAV.