---
title: "CVE-2007-1647\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2007-1647?format=md
keywords: index, follow
---

# CVE-2007-1647

Publication date 24 March 2007

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Moodle 1.5.2 and earlier stores sensitive information under the web root
with insufficient access control, and provides directory listings, which
allows remote attackers to obtain user names, password hashes, and other
sensitive information via a direct request for session (sess\_\*) files in
moodledata/sessions/.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| moodle | 7.04 feisty | Ignored end of life, was needed |
| 6.10 edgy | Ignored end of life, was needed |
| 6.06 LTS dapper | Ignored end of life, was needed |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1647)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-1647)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-1647)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2007-1647)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2007-1647>