CVE-2011-4302

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
moodlemoodle
1.9.2
moodlemoodle
1.9.3
moodlemoodle
1.9.4
moodlemoodle
1.9.5
moodlemoodle
1.9.6
moodlemoodle
1.9.7
moodlemoodle
1.9.8
moodlemoodle
1.9.9
moodlemoodle
1.9.10
moodlemoodle
1.9.11
moodlemoodle
1.9.12
moodlemoodle
1.9.13
moodlemoodle
2.0.0
moodlemoodle
2.0.1
moodlemoodle
2.0.2
moodlemoodle
2.0.3
moodlemoodle
2.0.4
moodlemoodle
2.1.0
moodlemoodle
2.1.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
Common Weakness Enumeration
References
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2
http://moodle.org/mod/forum/discuss.php?d=188314
https://bugzilla.redhat.com/show_bug.cgi?id=747444
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2
http://moodle.org/mod/forum/discuss.php?d=188314
https://bugzilla.redhat.com/show_bug.cgi?id=747444