Oval Definition:oval:com.ubuntu.precise:def:20126099000
Revision Date:2013-01-27Version:1
Title:CVE-2012-6099 on Ubuntu 12.04 LTS (precise) - medium.
Description:The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-6099
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'moodle' package in precise is affected and needs fixing.
    • BACK