medium6.0
CVE-2012-2244
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav.
Impact
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | Versions 1.4, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2012/dsa-2591
- https://bugs.launchpad.net/mahara/+bug/1057238
- https://mahara.org/interaction/forum/topic.php?id=4936
- http://www.debian.org/security/2012/dsa-2591
- https://bugs.launchpad.net/mahara/+bug/1057238
- https://mahara.org/interaction/forum/topic.php?id=4936