Movable Type Unspecified Local File Disclosure Vulnerability

Bugtraq ID:	48435
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 22 2011 12:00AM
Updated:	Jun 22 2011 12:00AM
Credit:	The vendor
Vulnerable:	Movable Type Movable Type Open Source 5.05 Movable Type Movable Type Open Source 5.04 Movable Type Movable Type Open Source 5.03 Movable Type Movable Type Open Source 4.36 Movable Type Movable Type Open Source 4.35 Movable Type Movable Type Open Source 4.34 Movable Type Movable Type Open Source 4.26 Movable Type Movable Type Open Source 4.25 Movable Type Movable Type Open Source 4.24 Movable Type Movable Type Open Source 4.23 Movable Type Movable Type Enterprise 4.36 Movable Type Movable Type Enterprise 4.35 Movable Type Movable Type Enterprise 4.34 Movable Type Movable Type Enterprise 4.26 Movable Type Movable Type Enterprise 4.25 Movable Type Movable Type Enterprise 4.24 Movable Type Movable Type Enterprise 4.23 Movable Type Movable Type Enterprise 4.22 Movable Type Movable Type 5.11 Movable Type Movable Type 5.05 Movable Type Movable Type 5.04 Movable Type Movable Type 5.03 Movable Type Movable Type 5.02 Movable Type Movable Type 5.01 Movable Type Movable Type 5.0 Movable Type Movable Type 4.36 Movable Type Movable Type 4.35 Movable Type Movable Type 4.34 Movable Type Movable Type 4.27 Movable Type Movable Type 4.26 Movable Type Movable Type 4.25 Movable Type Movable Type 4.24 Movable Type Movable Type 4.23 Movable Type Movable Type 4.22 Movable Type Movable Type 4.21
Not Vulnerable:	Movable Type Movable Type Open Source 5.12 Movable Type Movable Type Open Source 5.06 Movable Type Movable Type Open Source 4.37 Movable Type Movable Type Enterprise 4.37 Movable Type Movable Type Advanced 5.12 Movable Type Movable Type 5.12 Movable Type Movable Type 5.06 Movable Type Movable Type 4.37

Movable Type Unspecified Local File Disclosure Vulnerability

Movable Type is prone to an unspecified local file-disclosure vulnerability.

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

Movable Type Unspecified Local File Disclosure Vulnerability

Attackers may exploit this issue through a browser.

Movable Type Unspecified Local File Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Movable Type Unspecified Local File Disclosure Vulnerability

References:

• Movable Type 5.12, 5.06, and 4.37 Security Updates (Movable Type)
  
• Movable Type Homepage (Movable Type)