ID de Prueba:	1.3.6.1.4.1.25623.1.0.805369
Categoría:	Web application abuses
Título:	Movable Type RCE Vulnerability (Apr 2015)
Resumen:	Movable Type is prone to a remote code execution (RCE); vulnerability.
Descripción:	Summary: Movable Type is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw is due to the format string specifiers are not properly sanitized in user-supplied input. This may allow a remote attacker to cause a denial of service or potentially execute arbitrary code. Vulnerability Impact: Successful exploitation will allow an unauthenticated remote attacker to execute arbitrary code in an affected site. Affected Software/OS: Movable Type prior to version 5.2.13 and 6.x prior to 6.0.8. Solution: Update to version 5.2.13, 6.0.8 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0845 Debian Security Information: DSA-3227 (Google Search) http://www.debian.org/security/2015/dsa-3227 http://www.securitytracker.com/id/1032153
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.