Lucene search
HistoryJul 16, 2009 - 4:30 p.m.
CVE-2009-2481
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.004
Percentile
75.1%
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Affected configurations
Node
six_apartmovable_typeMatch1.54enterprise
ORsix_apartmovable_typeMatch2.6
ORsix_apartmovable_typeMatch2.63
ORsix_apartmovable_typeMatch3.3
ORsix_apartmovable_typeMatch3.16
ORsix_apartmovable_typeMatch3.17
ORsix_apartmovable_typeMatch3.32
ORsix_apartmovable_typeMatch3.33
ORsix_apartmovable_typeMatch3.36enterprise
ORsix_apartmovable_typeMatch4.20
ORsix_apartmovable_typeMatch4.20community_solution
ORsix_apartmovable_typeMatch4.20enterprise
ORsix_apartmovable_typeMatch4.20open_source
ORsix_apartmovable_typeMatch4.25
ORsixapartmovable_typeRange≤4.26
ORsixapartmovable_typeMatch1.00enterprise
ORsixapartmovable_typeMatch1.1enterprise
ORsixapartmovable_typeMatch1.2enterprise
ORsixapartmovable_typeMatch1.3enterprise
ORsixapartmovable_typeMatch1.4enterprise
ORsixapartmovable_typeMatch1.5enterprise
ORsixapartmovable_typeMatch1.31enterprise
ORsixapartmovable_typeMatch3.0d
ORsixapartmovable_typeMatch3.1
ORsixapartmovable_typeMatch3.01d
ORsixapartmovable_typeMatch3.2
ORsixapartmovable_typeMatch3.3
ORsixapartmovable_typeMatch3.11
ORsixapartmovable_typeMatch3.12
ORsixapartmovable_typeMatch3.14
ORsixapartmovable_typeMatch3.15
ORsixapartmovable_typeMatch3.16
ORsixapartmovable_typeMatch3.17
ORsixapartmovable_typeMatch3.32
ORsixapartmovable_typeMatch3.33
ORsixapartmovable_typeMatch3.34
ORsixapartmovable_typeMatch3.35
ORsixapartmovable_typeMatch4.0-community_solution
ORsixapartmovable_typeMatch4.0-pro
ORsixapartmovable_typeMatch4.01-community_solution
ORsixapartmovable_typeMatch4.1-community_solution
ORsixapartmovable_typeMatch4.1-pro
ORsixapartmovable_typeMatch4.01-pro
ORsixapartmovable_typeMatch4.01bcommunity_solution
ORsixapartmovable_typeMatch4.01bpro
ORsixapartmovable_typeMatch4.2
ORsixapartmovable_typeMatch4.2-community_solution
ORsixapartmovable_typeMatch4.2-pro
ORsixapartmovable_typeMatch4.12-community_solution
ORsixapartmovable_typeMatch4.12-pro
ORsixapartmovable_typeMatch4.21
ORsixapartmovable_typeMatch4.21-community_solution
ORsixapartmovable_typeMatch4.21-pro
ORsixapartmovable_typeMatch4.23
ORsixapartmovable_typeMatch4.23-community_solution
ORsixapartmovable_typeMatch4.23-pro
ORsixapartmovable_typeMatch4.25
| Vendor | Product | Version | CPE |
|---|---|---|---|
| six_apart | movable_type | 1.54 | cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:* |
| six_apart | movable_type | 2.6 | cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:* |
| six_apart | movable_type | 2.63 | cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.3 | cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.16 | cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.17 | cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.32 | cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.33 | cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:* |
| six_apart | movable_type | 3.36 | cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:* |
| six_apart | movable_type | 4.20 | cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:* |
Related
jvn
jvn
JVN#08369659 Movable Type access restriction bypass vulnerability
2009-06-24 00:00:00
cvelist
cvelist
CVE-2009-2481
2009-07-16 16:00:00
prion
prion
Crlf injection
2009-07-16 16:30:00
cve
cve
CVE-2009-2481
2009-07-16 16:30:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.004
Percentile
75.1%
Related for NVD:CVE-2009-2481