Fedora 17 : moodle-2.2.11-1.fc17 (2013-13252)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

CVE-2013-2243

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document...

CVE-2013-2243

This CVE concerns Moodle: mod/lesson/pagetypes/matching.php allows remote authenticated users to read the HTML source of a document and obtain sensitive answer information. Affected are Moodle releases up to 2.2.11; 2.3.x before 2.3.8; 2.4.x before 2.4.5; and 2.5.x before 2.5.1. The vulnerability...

Fedora 19 : moodle-2.4.5-2.fc19 (2013-12964)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

Fedora 18 : moodle-2.3.8-2.fc18 (2013-12950)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

SOL14228 - OpenSSH vulnerability CVE-2007-2243

Recommended Action None Supplemental Information CVE-2007-2243 SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Debian DSA-2591-1 : mahara - several vulnerabilities

Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2012-2243

Cross-site scripting XSS vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script. NOTE: this can be leveraged with CVE-2012-2244 to execut...

CVE-2012-2243

CVE-2012-2243 is a cross-site scripting (XSS) vulnerability in Mahara versions 1.4.x before 1.4.5 and 1.5.x before 1.5.4, exploitable by uploading an XML file with the xhtml extension, which is rendered inline as script. The note indicates this can be leveraged with CVE-2012-2244 to execute arbit...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

Debian Security Advisory DSA 2243-1 (unbound)

The remote host is missing an update to unbound announced via advisory DSA 2243-1. OpenVAS Vulnerability Test $Id: deb22431.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2243-1 unbound Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2009-2243

creationtimestamp| type| source ---|---|--- 2009-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8756...

SuSE 10 Security Update : clamav (ZYPP Patch Number 2243)

The virus scan engine ClamAV was update to version 0.88.6. Following issues are fixed by this update : - freshclam: apply timeout patch from Everton da Silva Marques new options: ConnectTimeout and ReceiveTimeout - clamd: change stack size at the right place closes clamav bug103 -...

CVE-2002-2243

CVE-2002-2243 affects akfingerd (0.5 and possibly earlier). The issue is a denial-of-service vulnerability where the daemon allows only one connection at a time and does not time out connections, enabling an attacker to cause refused connections by opening a connection and not closing it. Connect...

Design/Logic Flaw

OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...

CVE-2007-2243

OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, displaying a different response if the account exists (similar to CVE-2001-1483).

CVE-2006-2243

The vulnerability CVE-2006-2243 affects Web4Future News Portal and involves stored/reflected XSS by manipulating the ID parameter in two pages, comentarii.php and view.php. The root cause is insufficient input validation that allows arbitrary script/HTML injection, enabling remote attackers to ex...

akfingerd <= 0.5 Multiple Vulnerabilities

The remote finger service appears to be vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not effect other services that may be running on the remote computer, only the finger service can be disrupted. SPDX-FileCopyrightText: 2002 Andrew...

CVE-2004-2243

CVE-2004-2243 affects Phorum where remote attackers can hijack other users’ sessions by stealing and replaying the session hash in the phorum_uriauth parameter (demonstrated via profile.php). The note says the affected version was reported as 4.3.7, but this may be erroneous. No explicit remediat...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...