Debian 11 DSA-2334-1 Critical: Mahara Multiple Threats Remote Exploit
debian
November 4, 2011
Several vulnerabilities were discovered in Mahara, an electronic portfolio, weblog, and resume builder: CVE-2011-2771
Summary
Several vulnerabilities were discovered in Mahara, an electronic
portfolio, weblog, and resume builder:
CVE-2011-2771
Teemu Vesala discovered that missing input sanitising of RSS
feeds could lead to cross-site scripting.
CVE-2011-2772
Richard Mansfield discovered that insufficient upload restrictions
allowed denial of service.
CVE-2011-2773
Richard Mansfield that the management of institutions was prone to
cross-site request forgery.
(no CVE ID available yet)
Andrew Nichols discovered a privilege escalation vulnerability
in MNet handling.
For the oldstable distribution (lenny), this problem has been fixed in
version 1.0.4-4+lenny11.
For the stable distribution (squeeze), this problem has been fixed in
version 1.2.6-2+squeeze3.
For the unstable distribution (sid), this problem has been fixed in
version 1.4.1-1.
We recommend that you upgrade your mahara packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked...
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: mahara
CVE ID: CVE-2011-2771 CVE-2011-2772 CVE-2011-2773
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!