Executive Summary
| Summary | |
|---|---|
| Title | mahara security update |
| Informations | |||
|---|---|---|---|
| Name | DSA-2334 | First vendor Publication | 2011-11-04 |
| Vendor | Debian | Last vendor Modification | 2011-11-04 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.8 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Several vulnerabilities were discovered in Mahara, an electronic portfolio, weblog, and resume builder: CVE-2011-2771 Teemu Vesala discovered that missing input sanitising of RSS feeds could lead to cross-site scripting. CVE-2011-2772 Richard Mansfield discovered that insufficient upload restrictions allowed denial of service. CVE-2011-2773 Richard Mansfield that the management of institutions was prone to cross-site request forgery. (no CVE ID available yet) Andrew Nichols discovered a privilege escalation vulnerability in MNet handling. For the oldstable distribution (lenny), this problem has been fixed in version 1.0.4-4+lenny11. For the stable distribution (squeeze), this problem has been fixed in version 1.2.6-2+squeeze3. For the unstable distribution (sid), this problem has been fixed in version 1.4.1-1. We recommend that you upgrade your mahara packages. |
Original Source
| Url : http://www.debian.org/security/2011/dsa-2334 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 25 % | CWE-352 | Cross-Site Request Forgery (CSRF) (CWE/SANS Top 25) |
| 25 % | CWE-264 | Permissions, Privileges, and Access Controls |
| 25 % | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25) |
| 25 % | CWE-20 | Improper Input Validation |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:15228 | |||
| Oval ID: | oval:org.mitre.oval:def:15228 | ||
| Title: | DSA-2334-1 mahara -- several | ||
| Description: | Several vulnerabilities were discovered in Mahara, an electronic portfolio, weblog, and resume builder: CVE-2011-2771 Teemu Vesala discovered that missing input sanitising of RSS feeds could lead to cross-site scripting. CVE-2011-2772 Richard Mansfield discovered that insufficient upload restrictions allowed denial of service. CVE-2011-2773 Richard Mansfield that the management of institutions was prone to cross-site request forgery. Andrew Nichols discovered a privilege escalation vulnerability in MNet handling. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2334-1 CVE-2011-2771 CVE-2011-2772 CVE-2011-2773 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | mahara |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-02-11 | Name : Debian Security Advisory DSA 2334-1 (mahara) File : nvt/deb_2334_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 77207 | Mahara MNet XMLRPC Jump Remote Privilege Escalation |
| 76919 | Mahara admin/users/addtoinstitution.php User Institution Manipulation CSRF Mahara contains a flaw that allows a remote Cross-site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions for the addition of users to institutions. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into executing arbitrary commands in the context of their session with the application, without further prompting or verification. |
| 76918 | Mahara Overly Large Image Handling Remote DoS |
| 76917 | Mahara External Feed Block Unspecified XSS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2011-11-07 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2334.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:30:32 |
|
