MSA-11-0049: Network restriction ineffective with MNet

MSA-11-0049: Network restriction ineffective with MNet

by Michael de Raadt -
Number of replies: 0
Topic: ip_in_range always returns true
Severity: Serious
Versions affected: 1.9 to 1.9.14+ (2.x not affected)
Reported by: Patrick McNeill
Issue no.: MDL-29551
Changes (1.9): http://git.moodle.org/gw?p=moodle.git;a=commitdiff;h=3ab2851d2a59721445945d0706c58092e07e861e
Workaround: Do not rely in IP address restriction with MNet

Description:

The effectiveness of IP address restrictions through XMLRPC was faulty in some circumstances.