CVE-2012-0320
First published: Sat Mar 03 2012(Updated: )
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sixapart Movable Type | <=4.37 | |
| Sixapart Movable Type | =4.28 | |
| Sixapart Movable Type | =4.29 | |
| Sixapart Movable Type | =4.36 | |
| Sixapart Movable Type | =4.291 | |
| Sixapart Movable Type | =4.292 | |
| Sixapart Movable Type | =4.361 | |
| Sixapart Movable Type | =5.0 | |
| Sixapart Movable Type | =5.01 | |
| Sixapart Movable Type | =5.1 | |
| Sixapart Movable Type | =5.02 | |
| Sixapart Movable Type | =5.04 | |
| Sixapart Movable Type | =5.05 | |
| Sixapart Movable Type | =5.06 | |
| Sixapart Movable Type | =5.11 | |
| Sixapart Movable Type | =5.12 | |
| Sixapart Movable Type | =5.051 | |
| Sixapart Movable Type | <=4.292 | |
| Sixapart Movable Type | =4.28 | |
| Sixapart Movable Type | =4.29 | |
| Sixapart Movable Type | =4.291 | |
| Sixapart Movable Type | =5.1 | |
| Sixapart Movable Type | =5.02 | |
| Sixapart Movable Type | =5.04 | |
| Sixapart Movable Type | =5.05 | |
| Sixapart Movable Type | =5.06 | |
| Sixapart Movable Type | =5.11 | |
| Sixapart Movable Type | =5.12 | |
| Sixapart Movable Type | =5.051 | |
| Sixapart Movable Type | =4.0 | |
| Sixapart Movable Type | =4.0-beta | |
| Sixapart Movable Type | =4.0-beta2 | |
| Sixapart Movable Type | =4.0-beta3 | |
| Sixapart Movable Type | =4.0-beta4 | |
| Sixapart Movable Type | =4.0-beta5 | |
| Sixapart Movable Type | =4.0-beta6 | |
| Sixapart Movable Type | =4.0-beta7 | |
| Sixapart Movable Type | =4.0-rc1 | |
| Sixapart Movable Type | =4.0-rc2 | |
| Sixapart Movable Type | =4.0-rc3 | |
| Sixapart Movable Type | =4.1-beta | |
| Sixapart Movable Type | =4.1-beta2 | |
| Sixapart Movable Type | =4.1-rc1 | |
| Sixapart Movable Type | =4.2 | |
| Sixapart Movable Type | =4.2-rc2 | |
| Sixapart Movable Type | =4.2-rc4 | |
| Sixapart Movable Type | =4.2-rc5 | |
| Sixapart Movable Type | =4.12 | |
| Sixapart Movable Type | =4.15-beta1 | |
| Sixapart Movable Type | =4.15-beta3 | |
| Sixapart Movable Type | =4.15-beta4 | |
| Sixapart Movable Type | =4.22 | |
| Sixapart Movable Type | =4.23 | |
| Sixapart Movable Type | =4.24 | |
| Sixapart Movable Type | =4.25 | |
| Sixapart Movable Type | =4.26 | |
| Sixapart Movable Type | =4.27 | |
| Sixapart Movable Type | =4.28 | |
| Sixapart Movable Type | =4.29 | |
| Sixapart Movable Type | =4.35 | |
| Sixapart Movable Type | =4.36 | |
| Sixapart Movable Type | =4.37 | |
| Sixapart Movable Type | =4.261 | |
| Sixapart Movable Type | =4.291 | |
| Sixapart Movable Type | =4.292 | |
| Sixapart Movable Type | =4.361 | |
| Sixapart Movable Type | =5.0 | |
| Sixapart Movable Type | =5.0-beta1 | |
| Sixapart Movable Type | =5.0-beta2 | |
| Sixapart Movable Type | =5.0-beta3 | |
| Sixapart Movable Type | =5.0-beta4 | |
| Sixapart Movable Type | =5.0-rc1 | |
| Sixapart Movable Type | =5.0-rc2 | |
| Sixapart Movable Type | =5.0-rc3 | |
| Sixapart Movable Type | =5.01 | |
| Sixapart Movable Type | =5.1-beta | |
| Sixapart Movable Type | =5.1-rc1 | |
| Sixapart Movable Type | =5.02 | |
| Sixapart Movable Type | =5.03 | |
| Sixapart Movable Type | =5.04 | |
| Sixapart Movable Type | =5.05 | |
| Sixapart Movable Type | =5.06 | |
| Sixapart Movable Type | =5.07 | |
| Sixapart Movable Type | =5.11 | |
| Sixapart Movable Type | =5.12 | |
| Sixapart Movable Type | =5.031 | |
| Sixapart Movable Type | =5.051 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://jvn.jp/en/jp/JVN20083397/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018
- http://www.debian.org/security/2012/dsa-2423
- http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html
- http://www.movabletype.org/documentation/appendices/release-notes/513.html
- http://www.securityfocus.com/bid/52138
- http://www.securitytracker.com/id?1026738
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sixapart
- canonical/sixapart movable type
- version/sixapart movable type/4.37
- version/sixapart movable type/4.28
- version/sixapart movable type/4.29
- version/sixapart movable type/4.36
- version/sixapart movable type/4.291
- version/sixapart movable type/4.292
- version/sixapart movable type/4.361
- version/sixapart movable type/5.0
- version/sixapart movable type/5.01
- version/sixapart movable type/5.1
- version/sixapart movable type/5.02
- version/sixapart movable type/5.04
- version/sixapart movable type/5.05
- version/sixapart movable type/5.06
- version/sixapart movable type/5.11
- version/sixapart movable type/5.12
- version/sixapart movable type/5.051
- version/sixapart movable type/4.0
- version/sixapart movable type/4.0-beta
- version/sixapart movable type/4.0-beta2
- version/sixapart movable type/4.0-beta3
- version/sixapart movable type/4.0-beta4
- version/sixapart movable type/4.0-beta5
- version/sixapart movable type/4.0-beta6
- version/sixapart movable type/4.0-beta7
- version/sixapart movable type/4.0-rc1
- version/sixapart movable type/4.0-rc2
- version/sixapart movable type/4.0-rc3
- version/sixapart movable type/4.1-beta
- version/sixapart movable type/4.1-beta2
- version/sixapart movable type/4.1-rc1
- version/sixapart movable type/4.2
- version/sixapart movable type/4.2-rc2
- version/sixapart movable type/4.2-rc4
- version/sixapart movable type/4.2-rc5
- version/sixapart movable type/4.12
- version/sixapart movable type/4.15-beta1
- version/sixapart movable type/4.15-beta3
- version/sixapart movable type/4.15-beta4
- version/sixapart movable type/4.22
- version/sixapart movable type/4.23
- version/sixapart movable type/4.24
- version/sixapart movable type/4.25
- version/sixapart movable type/4.26
- version/sixapart movable type/4.27
- version/sixapart movable type/4.35
- version/sixapart movable type/4.261
- version/sixapart movable type/5.0-beta1
- version/sixapart movable type/5.0-beta2
- version/sixapart movable type/5.0-beta3
- version/sixapart movable type/5.0-beta4
- version/sixapart movable type/5.0-rc1
- version/sixapart movable type/5.0-rc2
- version/sixapart movable type/5.0-rc3
- version/sixapart movable type/5.1-beta
- version/sixapart movable type/5.1-rc1
- version/sixapart movable type/5.03
- version/sixapart movable type/5.07
- version/sixapart movable type/5.031