Request Tracker CVE-2017-5944 Remote Code Execution Vulnerability
BID:99381
Info
Request Tracker CVE-2017-5944 Remote Code Execution Vulnerability
| Bugtraq ID: | 99381 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-5944 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 03 2017 12:00AM |
| Updated: | Jul 03 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Bestpractical Request Tracker 4.4 Bestpractical Request Tracker 4.2.12 Bestpractical Request Tracker 4.2.11 Bestpractical Request Tracker 4.0.21 Bestpractical Request Tracker 4.0.20 Bestpractical Request Tracker 4.0.19 Bestpractical Request Tracker 4.0.18 Bestpractical Request Tracker 4.0.17 Bestpractical Request Tracker 4.2.9 Bestpractical Request Tracker 4.2.8 Bestpractical Request Tracker 4.2.7 Bestpractical Request Tracker 4.2.6 Bestpractical Request Tracker 4.2.5 Bestpractical Request Tracker 4.2.4 Bestpractical Request Tracker 4.2.3 Bestpractical Request Tracker 4.2.2 Bestpractical Request Tracker 4.2.1 Bestpractical Request Tracker 4.2.0 Bestpractical Request Tracker 4.0.9 Bestpractical Request Tracker 4.0.8 Bestpractical Request Tracker 4.0.7 Bestpractical Request Tracker 4.0.6 Bestpractical Request Tracker 4.0.5 Bestpractical Request Tracker 4.0.22 Bestpractical Request Tracker 4.0.16 Bestpractical Request Tracker 4.0.15 Bestpractical Request Tracker 4.0.14 Bestpractical Request Tracker 4.0.13 Bestpractical Request Tracker 4.0.12 Bestpractical Request Tracker 4.0.11 Bestpractical Request Tracker 4.0.10 |
| Not Vulnerable: |
Bestpractical Request Tracker 4.4.2 Bestpractical Request Tracker 4.2.14 Bestpractical Request Tracker 4.0.25 |
Discussion
Request Tracker CVE-2017-5944 Remote Code Execution Vulnerability
Request Tracker is prone to remote code-execution vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
Request Tracker (RT) versions 4.x prior to 4.0.25, 4.2.x prior to 4.2.14, and 4.4.x prior to 4.4.2 are vulnerable.
Request Tracker is prone to remote code-execution vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
Request Tracker (RT) versions 4.x prior to 4.0.25, 4.2.x prior to 4.2.14, and 4.4.x prior to 4.4.2 are vulnerable.
References
Request Tracker CVE-2017-5944 Remote Code Execution Vulnerability
References:
References:
- Request Tracker Homepage (Best Practical Solutions)
- DSA-3882-1 request-tracker4 -- security update (Debian)
- Security vulnerabilities in RT (2017-06-15) (bestpractical.com)