CVE-2011-4118

Publication date 15 November 2011

Last updated 24 July 2024

Ubuntu priority

Description

Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC target.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
mahara	11.10 oneiric	Fixed 1.4.0-1ubuntu0.1
	11.04 natty	Fixed 1.2.7-1ubuntu0.2
	10.10 maverick	Fixed 1.2.5-2ubuntu0.3
	10.04 LTS lucid	Fixed 1.2.4-1ubuntu0.4
	8.04 LTS hardy	Not in release

How can I get the fixes?
What do statuses mean?
Patch details

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
mahara	Debdiff: https://bugs.launchpad.net/ubuntu/+source/mahara/+bug/888358

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2011-4118