NVD

Id
48464  
Name
CVE-2009-1171  
Description
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-03-30  
Modified Date
2009-07-15  
Seq
2009-1171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244043 48464 CVE-2009-1171 http://cvs.moodle.org/moodle/filter/tex/filter.php?r1=1.18.4.4&r2=1.18.4.5  View
244044 48464 CVE-2009-1171 SUSE-SR:2009:009  View
244045 48464 CVE-2009-1171 http://tracker.moodle.org/browse/MDL-18552  View
244046 48464 CVE-2009-1171 DSA-1761  View
244047 48464 CVE-2009-1171 8297  View
244048 48464 CVE-2009-1171 USN-791-2  View
244049 48464 CVE-2009-1171 FEDORA-2009-3280  View
244050 48464 CVE-2009-1171 FEDORA-2009-3283  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43538 JVNDB-2009-004545 Moodle の TeX フィルタにおける任意のファイルを読み取られる脆弱性 Moodle の TeX フィルタには、任意のファイルを読み取られる脆弱性が存在します。 CVE-2009-1171 38602 CVE-2009-1171 48464 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004545.html 2009-03-30 2012-09-25 View