Request Tracker CVE-2015-1165 Information Disclosure Vulnerability

Bugtraq ID:	72837
Class:	Design Error
CVE:	CVE-2015-1165
Remote:	Yes
Local:	No
Published:	Feb 26 2015 12:00AM
Updated:	Feb 26 2015 12:00AM
Credit:	Christian Loos
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Best Practical Solutions RT 3.8.11 Best Practical Solutions RT 3.8.10 Best Practical Solutions RT 3.8.8 Best Practical Solutions RT 3.8.6 Best Practical Solutions RT 3.8.5 Best Practical Solutions RT 3.8.4 Best Practical Solutions RT 3.8.2 Best Practical Solutions RT 3.6.11 Best Practical Solutions RT 3.6.10 Best Practical Solutions RT 3.6.9 Best Practical Solutions RT 3.6.8 Best Practical Solutions RT 3.6.7 Best Practical Solutions RT 3.6.6 Best Practical Solutions RT 3.6.2 Best Practical Solutions RT 3.0.1 Best Practical Solutions RT 3.0 Best Practical Solutions RT 2.0.15 Best Practical Solutions RT 1.0.7 Best Practical Solutions RT 1.0.6 Best Practical Solutions RT 1.0.5 Best Practical Solutions RT 1.0.4 Best Practical Solutions RT 1.0.3 Best Practical Solutions RT 1.0.2 Best Practical Solutions RT 1.0.1 Best Practical Solutions RT 1.0 Best Practical Solutions RT 4.0.6 Best Practical Solutions RT 4.0 Best Practical Solutions RT 3.8.9 Best Practical Solutions RT 3.8.12
Not Vulnerable:

Request Tracker CVE-2015-1165 Information Disclosure Vulnerability

Request Tracker is prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.

Request Tracker CVE-2015-1165 Information Disclosure Vulnerability

An attacker can exploit this issue using a readily available tools.

Request Tracker CVE-2015-1165 Information Disclosure Vulnerability

References:

• 4.2.10 Release Notes (bestpractical)
  
• Request Tracker Home Page (bestpractical)
  
• Debian alert DSA-3176-1 (request-tracker4) (lwn)