CVE-2009-4304
Priority
Medium
Description
Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random
password salt in config.php, which makes it easier for attackers to conduct
brute-force password guessing attacks.
password salt in config.php, which makes it easier for attackers to conduct
brute-force password guessing attacks.
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | ignored (reached end-of-life) |
| Ubuntu 10.04 LTS (Lucid Lynx): | needed |
| Ubuntu 11.10 (Oneiric Ocelot): | not-affected (1.9.9.dfsg2-3) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (1.9.9.dfsg2-6) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (1.9.9.dfsg2-6) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (1.9.9.dfsg2-6) |