CVE-2005-3101: Medium severity Six Apart Movable Type vulnerability
Published Sep 28, 2005
·Updated
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Affected Software
1 affected component
Six Apart Movable Type=3.17
Remediation
Patch Available
Event History
Sep 28, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3101?
CVE-2005-3101 is considered a medium severity vulnerability due to information exposure.
2
How do I fix CVE-2005-3101?
To fix CVE-2005-3101, upgrade Movable Type to version 3.2 or later to eliminate the differing error messages.
3
What impact does CVE-2005-3101 have on users?
CVE-2005-3101 allows attackers to determine valid usernames, which can lead to targeted attacks on these accounts.
4
Which versions of Movable Type are affected by CVE-2005-3101?
Movable Type versions prior to 3.2, including version 3.17, are affected by CVE-2005-3101.
5
Who can exploit CVE-2005-3101?
Remote attackers can exploit CVE-2005-3101 to identify valid usernames through the password reset feature.