CVE-2009-1171 Path traversal in n/a
An attacker can read arbitrary files on the server by exploiting a LaTeX injection vulnerability in the Moodle TeX filter.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2009-1171?
CVE-2009-1171 is a medium-severity path traversal vulnerability in Moodle Moodle, published on 30 Mar 2009. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.
Weakness: CWE-20
Which versions are affected by CVE-2009-1171?
It affects 1 product.
Products include Moodle Moodle.
How do I fix CVE-2009-1171?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2009-1171 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-1171 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Moodle Moodle
- CVE-2006-4935 File upload in n/a
- CVE-2006-4936 Moodle does not properly validate module instance id
- CVE-2004-2233 Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
- CVE-2004-2235 Cross-site scripting in n/a
- CVE-2004-2236 Other in n/a
Sources
Also known as DSA-1761-1, GHSA-c8pm-7v2j-xmww.