Launchpad CVE tracker

CVE 2011-4118

Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC target.

Related bugs and status

CVE-2011-4118 (Candidate) is related to these bugs:

Bug #884223: Administrators masquerading as other users can jump to remote XMLRPC applications as that other user

Summary				In	Importance	Status
	884223	Administrators masquerading as other users can jump to remote XMLRPC applications as that other user		Mahara	High	Fix Released
	884223	Administrators masquerading as other users can jump to remote XMLRPC applications as that other user		Mahara 1.3	High	Fix Released

Bug #888358: Several security updates for Mahara

		In	Importance	Status
888358	Several security updates for Mahara	mahara (Ubuntu)	High	Fix Released
888358	Several security updates for Mahara	mahara (Ubuntu Lucid)	High	Fix Released
888358	Several security updates for Mahara	mahara (Ubuntu Maverick)	High	Fix Released
888358	Several security updates for Mahara	mahara (Ubuntu Precise)	High	Fix Released
888358	Several security updates for Mahara	mahara (Ubuntu Oneiric)	High	Fix Released
888358	Several security updates for Mahara	mahara (Ubuntu Natty)	High	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2011-4118

References