---
title: "CVE-2006-4943\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2006-4943?format=md
keywords: index, follow
---

# CVE-2006-4943

Publication date 23 September 2006

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

course/jumpto.php in Moodle before 1.6.2 does not validate the session key
(sesskey) before providing content from arbitrary local URIs, which allows
remote attackers to obtain sensitive information via the jump parameter.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| moodle | 9.10 karmic | Not affected |
| 9.04 jaunty | Not affected |
| 8.10 intrepid | Not affected |
| 8.04 LTS hardy | Not affected |
| 7.10 gutsy | Not affected |
| 7.04 feisty | Not affected |
| 6.10 edgy | Not affected |
| 6.06 LTS dapper | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4943)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-4943)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-4943)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2006-4943)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2006-4943>