FKIE_CVE-2012-0796

Vulnerability from fkie_nvd - Published: 2012-07-17 10:20 - Updated: 2026-06-16 23:38
Severity
Summary
class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.
References
secalert@redhat.comhttp://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9
secalert@redhat.comhttp://moodle.org/mod/forum/discuss.php?d=194015Vendor Advisory
secalert@redhat.comhttp://www.debian.org/security/2012/dsa-2421
secalert@redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=783532
af854a3a-2127-422b-91ae-364da2661108http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9
af854a3a-2127-422b-91ae-364da2661108http://moodle.org/mod/forum/discuss.php?d=194015Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2012/dsa-2421
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=783532
Impacted products
Vendor Product Version
moodle moodle 1.9.1
moodle moodle 1.9.2
moodle moodle 1.9.3
moodle moodle 1.9.4
moodle moodle 1.9.5
moodle moodle 1.9.6
moodle moodle 1.9.7
moodle moodle 1.9.8
moodle moodle 1.9.9
moodle moodle 1.9.10
moodle moodle 1.9.11
moodle moodle 1.9.12
moodle moodle 1.9.13
moodle moodle 1.9.14
moodle moodle 1.9.15
moodle moodle 2.0.0
moodle moodle 2.0.1
moodle moodle 2.0.2
moodle moodle 2.0.3
moodle moodle 2.0.4
moodle moodle 2.0.5
moodle moodle 2.0.6
moodle moodle 2.1.0
moodle moodle 2.1.1
moodle moodle 2.1.2
moodle moodle 2.1.3
moodle moodle 2.2.0
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "24F2602B-8ED3-4026-A9A4-31BE8BDC7724",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7F24649-B67F-4809-9F54-7B623AEF5A4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "291F73E9-1059-4E7F-860F-0DF2A35AA456",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EB5859E-0996-46B5-BB44-34BD6EACBCF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F87F6707-99AB-478A-909D-1D87298D5514",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BCE8B26-58BB-471C-B291-E6AE22B96C5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "768CE5AF-955B-4148-998A-A46BBDBA618B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "4283440F-9B21-4CE9-81FF-79DF3DEDCEE7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "A989FADA-89C3-472B-86BF-0630D1CBBCA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FAF84CB-46F1-4F37-BBAC-1CED0600B5B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FCA633D-E6CA-4D38-937B-9F83179CDAEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:1.9.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "8004AA63-BD38-40A6-9505-2C9C19DC0CB5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD248A1D-CACC-4E76-925A-078B736442AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B8A0403-0869-495F-B7C0-13A387549C7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "39791F43-CF89-485B-AA8B-634C282BB025",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "428E4846-8C9E-4592-8437-88FCDCED704D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4096977-3258-48B0-9C7B-D43FBC8BB1EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "448E5353-CD0E-407C-84F4-5E6D014A28FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D57A08BD-67FA-4899-96BD-C84896321E51",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "18C6F348-DAE9-4440-8B3A-8D92ADC6606F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "367537BF-CBDF-4CBB-91B4-6E5A567EF605",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DABBF325-C48A-4838-AC5D-0565C78976CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "02B72177-DFB0-4242-9ED6-068E5751579B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "15A73CE2-73DA-4274-89E0-DD9A413ED17F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header."
    },
    {
      "lang": "es",
      "value": "class.phpmailer.php en la biblioteca PHPMailer, como los usados ??en Moodle v1.9.x antes de v1.9.16, v2.0.x antes de v2.0.7, v2.1.x antes de v2.1.4, y v2.2.x antes de v2.2.1 y otros productos, permite a usuarios remotos autenticados inyectar arbitrarias encabezados de correo electr\u00f3nico a trav\u00e9s de vectores relacionados con un hecho a mano (1) de: o (2) remitente: cabecera."
    }
  ],
  "id": "CVE-2012-0796",
  "lastModified": "2026-06-16T23:38:16.640",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 4.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-07-17T10:20:53.053",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://moodle.org/mod/forum/discuss.php?d=194015"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2012/dsa-2421"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=783532"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://moodle.org/mod/forum/discuss.php?d=194015"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2012/dsa-2421"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=783532"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.