oss-sec mailing list archives
Re: CVE request for Movable Type
From: cve-assign () mitre org
Date: Tue, 22 Jan 2013 21:38:10 -0500 (EST)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Movable Type 4.38 has been released ...
Please use CVE-2013-0209 for this issue.
We decided to keep CVE-2013-0209 instead of the other CVE that was reserved for this through MITRE a while ago. Also, we decided to cover this with one CVE entry even though the various issues discussed ("OS command injection and SQL injection" in the vendor advisory, and "perl code injection" in the researcher's advisory) can perhaps be interpreted in other ways. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0209 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6315 - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (SunOS) iQEcBAEBAgAGBQJQ/0tEAAoJEGvefgSNfHMdTdEH/ReXfWbrwCYE97+W9y8uAHyW +EfPHRUmEfmIOfH61IakvsHp1RbBCkoLakZkI4fU0mXoIhuD1pNT5wpj/G+EIzs4 pHDLm3qxI7iqe0r2gG747RDuAVwHxbxVqbwJqlarD9Dct6lTIrb5h5tXyL0j08ph SHYl3JoJeBzbImJmwMLdI37dRYPXNaLbB4tt7CbwX6xeLDJ3RzxmpYUuw6UKq9ZM dJbDNLFePUQsQDofrgv77ZRn6A+92TKMI9ecA7abcAs4OTgIQ24TxwA+gSi9n3rp f581/R4oR3Qz5rRnYlWtoMNynmFxIH5vFfWJAAkZ7v381Hr51a4YCIvTo1PiU0g= =ys3d -----END PGP SIGNATURE-----
Current thread:
- CVE request for Movable Type Yves-Alexis Perez (Jan 21)
- Re: CVE request for Movable Type Kurt Seifried (Jan 21)
- Re: CVE request for Movable Type cve-assign (Jan 22)
- Re: CVE request for Movable Type Kurt Seifried (Jan 21)