CVE

Id
41735  
CVE No.
CVE-2009-4300  
Status
Candidate  
Description
Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.  
Phase
Assigned (20091211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
457975 41735 CVE-2009-4300 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.11_release_notes  View
457976 41735 CVE-2009-4300 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.7_release_notes  View
457977 41735 CVE-2009-4300 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=139105  View
457978 41735 CVE-2009-4300 FEDORA:FEDORA-2009-13040  View
457979 41735 CVE-2009-4300 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html  View
457980 41735 CVE-2009-4300 FEDORA:FEDORA-2009-13065  View
457981 41735 CVE-2009-4300 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html  View
457982 41735 CVE-2009-4300 FEDORA:FEDORA-2009-13080  View
457983 41735 CVE-2009-4300 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html  View
457984 41735 CVE-2009-4300 BID:37244  View
457985 41735 CVE-2009-4300 URL:http://www.securityfocus.com/bid/37244  View
457986 41735 CVE-2009-4300 SECUNIA:37614  View
457987 41735 CVE-2009-4300 URL:http://secunia.com/advisories/37614  View
457988 41735 CVE-2009-4300 VUPEN:ADV-2009-3455  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44195 JVNDB-2009-005202 Moodle における総当たりでパスワードを推測する攻撃を実行される脆弱性 Moodle は、config.php 内ランダムパスワードソルトを使用しないため、総当たりでパスワードを推測する攻撃を実行される脆弱性が存在します。 CVE-2009-4304 41735 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005202.html  View