您现在的位置是:首页 > IT基础架构 > 网络与安全 >

Mahara管理密码重置安全绕过漏洞

2009-12-07 22:45:00作者: 来源:

摘要影响版本: Mahara Mahara 1.1.6 Mahara Mahara 1.1.5 ...

影响版本:

Mahara Mahara 1.1.6 

Mahara Mahara 1.1.5 

Mahara Mahara 1.1.4 

Mahara Mahara 1.1.3 

Mahara Mahara 1.1.2 

Mahara Mahara 1.1.1 

Mahara Mahara 1.0.12 

Mahara Mahara 1.0.11 

Mahara Mahara 1.0.10 

Mahara Mahara 1.0.9 

Mahara Mahara 1.0.8 

Mahara Mahara 1.0.6 

Mahara Mahara 1.0.5 

Mahara Mahara 1.0.4 

Mahara Mahara 1.0.3 

Mahara Mahara 1.0.2 

Mahara Mahara 1.0.1漏洞描述:

Bugraq ID: 36893

CVE ID:CVE-2009-3298

Mahara是一款开源的电子文件夹,网络日志,履历表生成器和社会化网络系统。

Mahara存在一个未明的安全漏洞,远程攻击者可以重设站点管理员密码,导致完全控制应用系统。<*参考 

http://secunia.com/advisories/37217

http://www.debian.org/security/2009/dsa-1924

http://mahara.org/interaction/forum/topic.php?id=1169

*>

SEBUG安全建议:

用户可联系供应商升级到最新版本:

Mahara Mahara 1.0.10 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.11 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.12 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.2 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.3 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.4 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.5 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.6 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.8 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.9 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.1.1 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.2 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.3 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.4 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.5 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.6 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip


(本文不涉密)
责任编辑:

站点信息

  • 运营主体:中国信息化周报
  • 商务合作:赵瑞华 010-88559646
  • 微信公众号:扫描二维码,关注我们