Detections
Analytics
FreeBSD : moodle -- multiple vulnerabilities (3ddcb42b-5b78-11e6-b334-002590263bf5)
medium Nessus Plugin ID 92770
Language:
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Marina Glancy reports :- MSA-16-0019: Glossary search displays entries without checking user permissions to view them
- MSA-16-0020: Text injection in email headers
- MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 92770
File Name: freebsd_pkg_3ddcb42b5b7811e6b334002590263bf5.nasl
Version: 2.4
Type: local
Family: FreeBSD Local Security Checks
Published: 8/8/2016
Updated: 1/4/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.5
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:moodle28, p-cpe:/a:freebsd:freebsd:moodle29, p-cpe:/a:freebsd:freebsd:moodle30, p-cpe:/a:freebsd:freebsd:moodle31, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 8/6/2016
Vulnerability Publication Date: 7/19/2016