CVE

Id
41733  
CVE No.
CVE-2009-4298  
Status
Candidate  
Description
The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.  
Phase
Assigned (20091211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
457947 41733 CVE-2009-4298 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.11_release_notes  View
457948 41733 CVE-2009-4298 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.7_release_notes  View
457949 41733 CVE-2009-4298 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=139102  View
457950 41733 CVE-2009-4298 FEDORA:FEDORA-2009-13040  View
457951 41733 CVE-2009-4298 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html  View
457952 41733 CVE-2009-4298 FEDORA:FEDORA-2009-13065  View
457953 41733 CVE-2009-4298 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html  View
457954 41733 CVE-2009-4298 FEDORA:FEDORA-2009-13080  View
457955 41733 CVE-2009-4298 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html  View
457956 41733 CVE-2009-4298 BID:37244  View
457957 41733 CVE-2009-4298 URL:http://www.securityfocus.com/bid/37244  View
457958 41733 CVE-2009-4298 SECUNIA:37614  View
457959 41733 CVE-2009-4298 URL:http://secunia.com/advisories/37614  View
457960 41733 CVE-2009-4298 VUPEN:ADV-2009-3455  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44193 JVNDB-2009-005200 Moodle の login/index_form.html における資格情報を取得される脆弱性 Moodle の login/index_form.html は、ページが HTTPS ポートから提供されている場合でも、HTTP ポート上の index ページにリンクする、およびSSL を指定されている場合でも、ログイン資格情報がクリアテキストで送信される不備があるため、資格情報を取得される脆弱性が存在します。 CVE-2009-4302 41733 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005200.html  View