CVE-2011-3993

{"id": "CVE-2011-3993", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-11-03T17:55:01.780", "references": [{"url": "http://jvn.jp/en/jp/JVN41032068/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000093", "source": "vultures@jpcert.or.jp"}, {"url": "http://www.mtcms.jp/news/product/201110131921.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvn.jp/en/jp/JVN41032068/index.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000093", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mtcms.jp/news/product/201110131921.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad en plugins SKYARC MTCMS anterior a v5.252, y en MultiFileUploader v0.44 y anteriores, DuplicateEntry v1.2 y anteriores, MailPack v1.741 y anteriores, y AutoTagging v0.08 y anteriores para Movable Type utiliza permisos d\u00e9biles, lo que permite a usuarios remotos autenticados modificar ficheros y par\u00e1metros de configuraci\u00f3n a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:31:40.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:skyarc:autotagging:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "700A3014-4DD6-4694-A83E-C04267951C07", "versionEndIncluding": "0.08"}, {"criteria": "cpe:2.3:a:skyarc:duplicateentry:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "943E5640-4B68-417A-B9DC-961029EBB604", "versionEndIncluding": "1.2"}, {"criteria": "cpe:2.3:a:skyarc:mailpack:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6C36983-9CA0-4705-BBB2-77EFA831460A", "versionEndIncluding": "1.741"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59C8DD6E-6645-43BC-8C62-7CBB750DB9D7", "versionEndIncluding": "5.251"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D5A177C-9E80-4FBF-A443-8429142C0963"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A7E0117-F13D-48E5-A859-7C87C6F0FAA2"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B926DF53-7927-40E9-8565-F00BDFE06909"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE6725E4-D378-4EA6-983F-9C00A02F8B56"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A3CD3BC-4D14-4924-8C9D-6F9046CAB9FA"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.24:*:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D17F47AC-2B96-4D1B-932F-95E6852D7217"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.24:*:smart:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0CB190-C55D-4D58-9A64-A23D3C106B99"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC5216DB-FE4C-486D-8597-6BBE2AE0D01F"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.25:*:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58360AF1-8638-4B63-9655-702DFCA8F872"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.25:*:smart:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DBDC0FD-7679-4503-AAF2-01DD31FB1A00"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.251:*:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33D411B2-A032-451F-868A-4FBE2D6A0352"}, {"criteria": "cpe:2.3:a:skyarc:mtcms:5.251:*:smart:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "820F9FD8-6948-4DC2-ADFF-E69CC758C6CE"}, {"criteria": "cpe:2.3:a:skyarc:multifileuploader:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89E4A66A-36C7-484E-B1C5-E8CB296A679A", "versionEndIncluding": "0.44"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}