Mahara管理密码重置安全绕过漏洞

影响版本:

Mahara Mahara 1.1.6 

Mahara Mahara 1.1.5 

Mahara Mahara 1.1.4 

Mahara Mahara 1.1.3 

Mahara Mahara 1.1.2 

Mahara Mahara 1.1.1 

Mahara Mahara 1.0.12 

Mahara Mahara 1.0.11 

Mahara Mahara 1.0.10 

Mahara Mahara 1.0.9 

Mahara Mahara 1.0.8 

Mahara Mahara 1.0.6 

Mahara Mahara 1.0.5 

Mahara Mahara 1.0.4 

Mahara Mahara 1.0.3 

Mahara Mahara 1.0.2 

Mahara Mahara 1.0.1漏洞描述:

Bugraq ID: 36893

CVE ID：CVE-2009-3298

Mahara是一款开源的电子文件夹，网络日志，履历表生成器和社会化网络系统。

Mahara存在一个未明的安全漏洞，远程攻击者可以重设站点管理员密码，导致完全控制应用系统。<*参考 

http://secunia.com/advisories/37217

http://www.debian.org/security/2009/dsa-1924

http://mahara.org/interaction/forum/topic.php?id=1169

*>

SEBUG安全建议:

用户可联系供应商升级到最新版本：

Mahara Mahara 1.0.10 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.11 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.12 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.2 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.3 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.4 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.5 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.6 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.8 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.0.9 

Mahara mahara-1.0.13.zip

https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip

Mahara Mahara 1.1.1 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.2 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.3 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.4 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.5 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

Mahara Mahara 1.1.6 

Mahara mahara-1.1.7.zip

https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip

(本文不涉密)
责任编辑：

转载：感谢您对网站平台的认可，以及对我们原创作品以及文章的青睐，非常欢迎各位朋友分享到个人站长或者朋友圈，但转载请说明文章出处。