Request Tracker (RT) Multiple Security Vulnerabilities
BID:56290
Info
Request Tracker (RT) Multiple Security Vulnerabilities
| Bugtraq ID: | 56290 |
| Class: | Unknown |
| CVE: |
CVE-2012-4730 CVE-2012-4732 CVE-2012-4734 CVE-2012-4735 CVE-2012-4884 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2012 12:00AM |
| Updated: | Apr 13 2015 09:44PM |
| Credit: | Scott MacVicar, Matthew Astley, Matthijs Melissen, University of Luxembourg |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Best Practical Solutions RT 3.8.11 Best Practical Solutions RT 3.8.10 Best Practical Solutions RT 3.8.8 Best Practical Solutions RT 3.8.6 Best Practical Solutions RT 3.8.5 Best Practical Solutions RT 3.8.4 Best Practical Solutions RT 3.8.2 Best Practical Solutions RT 4.0.6 Best Practical Solutions RT 4.0 Best Practical Solutions RT 3.8.9 Best Practical Solutions RT 3.8.12 |
| Not Vulnerable: | |
Discussion
Request Tracker (RT) Multiple Security Vulnerabilities
Request Tracker (RT) is prone to multiple security vulnerabilities including:
1. A spoofing vulnerability
2. Multiple security-bypass vulnerabilities
3. A cross-site request-forgery vulnerability
4. A command-injection vulnerability
Attackers may exploit these issues to perform certain administrative actions, add arbitrary email headers, execute arbitrary commands, bypass certain security restrictions, gain unauthorized access to the affected application, or delete certain data. Other attacks are also possible.
RT versions prior to 3.8.15 and 4.0.8 are affected.
Request Tracker (RT) is prone to multiple security vulnerabilities including:
1. A spoofing vulnerability
2. Multiple security-bypass vulnerabilities
3. A cross-site request-forgery vulnerability
4. A command-injection vulnerability
Attackers may exploit these issues to perform certain administrative actions, add arbitrary email headers, execute arbitrary commands, bypass certain security restrictions, gain unauthorized access to the affected application, or delete certain data. Other attacks are also possible.
RT versions prior to 3.8.15 and 4.0.8 are affected.
Exploit / POC
Request Tracker (RT) Multiple Security Vulnerabilities
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Request Tracker (RT) Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Request Tracker (RT) Multiple Security Vulnerabilities
References:
References:
- RT Homepage (Best Practical Solutions)