Candidate: CVE-2011-4285 PublicDate: 2012-07-16 10:28:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4285 Description: The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role. Ubuntu-Description: Notes: jdstrand> moodle 2.0 only Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream_moodle: needs-triage hardy_moodle: ignored (reached end-of-life) lucid_moodle: not-affected maverick_moodle: not-affected natty_moodle: not-affected oneiric_moodle: not-affected devel_moodle: not-affected (1.9.9.dfsg2-4)