Request Tracker Multiple Security Vulnerabilities
BID:53660
Info
Request Tracker Multiple Security Vulnerabilities
| Bugtraq ID: | 53660 |
| Class: | Unknown |
| CVE: |
CVE-2011-2082 CVE-2011-2083 CVE-2011-2084 CVE-2011-2085 CVE-2011-4458 CVE-2011-4459 CVE-2011-4460 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2012 12:00AM |
| Updated: | Apr 13 2015 08:26PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Best Practical Solutions RT 3.8.11 Best Practical Solutions RT 3.8.10 Best Practical Solutions RT 3.8.8 Best Practical Solutions RT 3.8.6 Best Practical Solutions RT 3.8.5 Best Practical Solutions RT 3.8.4 Best Practical Solutions RT 3.8.2 Best Practical Solutions RT 4.0 Best Practical Solutions RT 3.8.9 |
| Not Vulnerable: |
Best Practical Solutions RT 4.0.6 Best Practical Solutions RT 3.8.12 |
Discussion
Request Tracker Multiple Security Vulnerabilities
Request Tracker is prone to multiple security vulnerabilities including:
1. A remote code-execution vulnerability
2. A cross-site scripting vulnerability
3. An SQL-injection vulnerability
4. Multiple information-disclosure vulnerabilities
5. A security-bypass vulnerability
6. A cross-site request-forgery vulnerability
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to steal cookie-based authentication credentials, to perform unauthorized actions, to exploit latent vulnerabilities in the underlying database, to access or modify data, to disclose sensitive information, to execute arbitrary code, to perform unauthorized actions in the context of a user's session, or to perform unauthorized actions. Other attacks are also possible.
RT versions prior to 3.8.12 and 4.0.6 are affected.
Request Tracker is prone to multiple security vulnerabilities including:
1. A remote code-execution vulnerability
2. A cross-site scripting vulnerability
3. An SQL-injection vulnerability
4. Multiple information-disclosure vulnerabilities
5. A security-bypass vulnerability
6. A cross-site request-forgery vulnerability
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to steal cookie-based authentication credentials, to perform unauthorized actions, to exploit latent vulnerabilities in the underlying database, to access or modify data, to disclose sensitive information, to execute arbitrary code, to perform unauthorized actions in the context of a user's session, or to perform unauthorized actions. Other attacks are also possible.
RT versions prior to 3.8.12 and 4.0.6 are affected.
Exploit / POC
Request Tracker Multiple Security Vulnerabilities
Attackers can exploit some of these issues through a browser. To exploit the cross-site scripting and cross-site request-forgery issues, an attacker must entice an unsuspecting user into following a malicious URI.
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Attackers can exploit some of these issues through a browser. To exploit the cross-site scripting and cross-site request-forgery issues, an attacker must entice an unsuspecting user into following a malicious URI.
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Request Tracker Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Request Tracker Multiple Security Vulnerabilities
References:
References:
- RT Homepage (Best Practical Solutions)
- [rt-announce] RT 3.8.12 Released - Security Release (Best Practical Solutions)
- [rt-announce] RT 4.0.6 Released - Security Release (Best Practical Solutions)
- [rt-announce] Security vulnerabilities in RT (Best Practical Solutions)