Movable Type Unspecified Security Bypass Vulnerability

Bugtraq ID:	37638
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 06 2010 12:00AM
Updated:	Jan 06 2010 10:22PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Movable Type Movable Type 5.0 Movable Type Movable Type 4.261 Movable Type Movable Type 4.26 Movable Type Movable Type 4.25 Movable Type Movable Type 4.24 Movable Type Movable Type 4.23 Movable Type Movable Type 4.22 Movable Type Movable Type 4.21 Movable Type Movable Type 4.13 Movable Type Movable Type 4.01 Movable Type Movable Type 4
Not Vulnerable:	Movable Type Movable Type 5.01 Movable Type Movable Type 4.27

Movable Type Unspecified Security Bypass Vulnerability

Movable Type is prone to an unspecified security-bypass vulnerability.

Very little is known about this issue at this time. We will update this BID as more information emerges.

This issue affects versions prior to Movable Type 4.27 and 5.01.

Movable Type Unspecified Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Movable Type Unspecified Security Bypass Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

Movable Type Unspecified Security Bypass Vulnerability

References:

• Movable Type 5.01 (Movable Type)
  
• Movable Type Homepage (Movable Type)
  
• JVN#09872874 Movable Type access restriction bypass vulnerability (http://jvn.jp/en/jp/JVN09872874/index.html)