Vulnerability CVE-2009-2492 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2492 (CCN-51973)

Assigned:

2009-06-24

Published:

2009-06-24

Updated:

2009-08-07

Summary:

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

2.6 Low (CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
2.2 Low (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2009-2492

Source: JVN
Type: UNKNOWN
JVN#86472161

Source: CCN
Type: JVN#86472161
Movable Type

Source: JVNDB
Type: Patch
JVNDB-2009-000042

Source: CCN
Type: SA35534
Movable Type Security Bypass and Cross-Site Scripting Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
35534

Source: CCN
Type: Movable Type Web site
Movable Type: Download

Source: BID
Type: UNKNOWN
35885

Source: CCN
Type: BID-35885
Movable Type 'mt-wizard.cgi' Cross Site Scripting Vulnerability

Source: VUPEN
Type: Patch, Vendor Advisory
ADV-2009-1668

Source: XF
Type: UNKNOWN
movabletype-mtwizardcgi-xss(51973)

Vulnerable Configuration:

Configuration 1:

cpe:/a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:2.6:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:2.63:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.3:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.16:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.17:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.32:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.33:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4:*:community_solution:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4:*:enterprise:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4:*:open_source:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:*:*:*:*:*:*:*:* (Version <= 4.25)

OR cpe:/a:six_apart_ltd:movable_type:*:*:*:*:*:*:*:*

OR cpe:/a:six_apart_ltd:movable_type:3.33:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.1:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.2:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.3:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.11:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.12:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.14:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.15:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.16:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.17:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.32:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.33:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.34:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:3.35:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.2:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.21:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*

Configuration CCN 1:

cpe:/a:six_apart:movable_type:4.20::open_source:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20::enterprise:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.20:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.0:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.01:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.2:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.21:*:*:*:*:*:*:*

OR cpe:/a:sixapart:movable_type:4.24:*:*:*:*:*:*:*

OR cpe:/a:six_apart:movable_type:4.25:*:*:*:*:*:*:*

Denotes that component is vulnerable