Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Debian Security Advisory DSA-2172-1 Urgent phpCAS Remote Exploit for Moodle

debian
Calendar Grey February 22, 2011
Debian Logo
The new Moodle security release tackles crucial phpCAS vulnerabilities, urging immediate upgrades to protect sensitive data and enhance security for users
Several vulnerabilties have been discovered in phpCAS, a CAS client library for PHP

Summary

Several vulnerabilties have been discovered in phpCAS, a CAS client
library for PHP. The Moodle course management system includes a copy
of phpCAS.

For the oldstable distribution (lenny), this problem has been fixed in
version 1.8.13-3.

The stable distribution (squeeze) already contains a fixed version of
phpCAS.

The unstable distribution (sid) already contains a fixed version of
phpCAS.

We recommend that you upgrade your moodle packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: moodle
CVE ID: CVE-2010-2795 CVE-2010-2796 CVE-2010-3690 CVE-2010-3691 CVE-2010-3692

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here