CVE

Id
39916  
CVE No.
CVE-2009-2481  
Status
Candidate  
Description
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.  
Phase
Assigned (20090716)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438705 39916 CVE-2009-2481 JVN:JVN#08369659  View
438706 39916 CVE-2009-2481 URL:http://jvn.jp/en/jp/JVN08369659/index.html  View
438707 39916 CVE-2009-2481 JVNDB:JVNDB-2009-000043  View
438708 39916 CVE-2009-2481 URL:http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html  View
438709 39916 CVE-2009-2481 BID:35471  View
438710 39916 CVE-2009-2481 URL:http://www.securityfocus.com/bid/35471  View
438711 39916 CVE-2009-2481 SECUNIA:35534  View
438712 39916 CVE-2009-2481 URL:http://secunia.com/advisories/35534  View
438713 39916 CVE-2009-2481 VUPEN:ADV-2009-1668  View
438714 39916 CVE-2009-2481 URL:http://www.vupen.com/english/advisories/2009/1668  View
438715 39916 CVE-2009-2481 XF:movabletype-mtwizard-security-bypass(51330)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45158 JVNDB-2009-006165 HT-MP3Player におけるスタックベースのバッファオーバーフローの脆弱性 HT-MP3Player には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-2485 39916 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006165.html  View