Re: Multiple Vulnerabilities in Moodle

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Multiple Vulnerabilities in Moodle
From: Martin Dougiamas <martin@xxxxxxxxxx>
Date: 30 Dec 2004 15:25:07 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

In-Reply-To: <20041227194544.6255.qmail@xxxxxxxxxxxxxxxxxxxxx>


>Session File Disclosure vulnerability is patched in version 1.4.3.
>Cross Site Scripting vulnerability will be patched probably in
>version 1.5.

In fact both of these were fixed in 1.4.3 (the currently available release).

Prev by Date: MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability
Next by Date: Re: Sanity Worm Concepts
Previous by thread: Multiple Vulnerabilities in Moodle
Next by thread: MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities
Index(es):
- Date
- Thread