Upstream information
CVE-2009-1171 at MITRE
Description
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.
NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Novell/SUSE information
Novell Bugzilla entry:
490087
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| openSUSE 10.3 | moodle >= 1.8.2-17.14moodle-af >= 1.8.2-17.14moodle-ar >= 1.8.2-17.14moodle-be >= 1.8.2-17.14moodle-bg >= 1.8.2-17.14moodle-bs >= 1.8.2-17.14moodle-ca >= 1.8.2-17.14moodle-cs >= 1.8.2-17.14moodle-da >= 1.8.2-17.14moodle-de >= 1.8.2-17.14moodle-de_du >= 1.8.2-17.14moodle-el >= 1.8.2-17.14moodle-es >= 1.8.2-17.14moodle-et >= 1.8.2-17.14moodle-eu >= 1.8.2-17.14moodle-fa >= 1.8.2-17.14moodle-fi >= 1.8.2-17.14moodle-fr >= 1.8.2-17.14moodle-ga >= 1.8.2-17.14moodle-gl >= 1.8.2-17.14moodle-he >= 1.8.2-17.14moodle-hi >= 1.8.2-17.14moodle-hr >= 1.8.2-17.14moodle-hu >= 1.8.2-17.14moodle-id >= 1.8.2-17.14moodle-is >= 1.8.2-17.14moodle-it >= 1.8.2-17.14moodle-ja >= 1.8.2-17.14moodle-ka >= 1.8.2-17.14moodle-km >= 1.8.2-17.14moodle-kn >= 1.8.2-17.14moodle-ko >= 1.8.2-17.14moodle-lt >= 1.8.2-17.14moodle-lv >= 1.8.2-17.14moodle-mi_tn >= 1.8.2-17.14moodle-ms >= 1.8.2-17.14moodle-nl >= 1.8.2-17.14moodle-nn >= 1.8.2-17.14moodle-no >= 1.8.2-17.14moodle-pl >= 1.8.2-17.14moodle-pt >= 1.8.2-17.14moodle-ro >= 1.8.2-17.14moodle-ru >= 1.8.2-17.14moodle-sk >= 1.8.2-17.14moodle-sl >= 1.8.2-17.14moodle-so >= 1.8.2-17.14moodle-sq >= 1.8.2-17.14moodle-sr >= 1.8.2-17.14moodle-sv >= 1.8.2-17.14moodle-th >= 1.8.2-17.14moodle-tl >= 1.8.2-17.14moodle-tr >= 1.8.2-17.14moodle-uk >= 1.8.2-17.14moodle-vi >= 1.8.2-17.14moodle-zh_cn >= 1.8.2-17.14
| |
