Moodle Teacher Privilege Escalation Vulnerability

Bugtraq ID:	14013
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 20 2004 12:00AM
Updated:	Mar 20 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Moodle moodle 1.1.1
Not Vulnerable:	Moodle moodle 1.2

Moodle Teacher Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Moodle 1.1.1. Teacher accounts are able to obtain administrative access to the Web application.

This issue was reported in Moodle 1.1.1. Earlier versions may be affected.

Moodle Teacher Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Moodle Teacher Privilege Escalation Vulnerability

Solution:
Users may upgrade to Moodle 1.2 or later.


Moodle moodle 1.1.1

• Moodle moodle-latest.tgz
  This is the latest development version that will become version 1.3 of the software. The fix for this issue has been incorporated into the product and will be included in the next official release.
  http://moodle.org/download.php/moodle/moodle-latest.tgz

Moodle Teacher Privilege Escalation Vulnerability

References:

• Moodle Home Page (Moodle)
  
• Moodle Release Notes (Moodle)