---
title: "CVE-2006-4938\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2006-4938?format=md
keywords: index, follow
---

# CVE-2006-4938

Publication date 23 September 2006

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

help.php in Moodle before 1.6.2 does not check the existence of certain
help files before including them, which might allow remote authenticated
users to obtain the path in an error message.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| moodle | 9.10 karmic | Not affected |
| 9.04 jaunty | Not affected |
| 8.10 intrepid | Not affected |
| 8.04 LTS hardy | Not affected |
| 7.10 gutsy | Not affected |
| 7.04 feisty | Not affected |
| 6.10 edgy | Not affected |
| 6.06 LTS dapper | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4938)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-4938)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-4938)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2006-4938)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2006-4938>