Lucene search
MitreCVELIST:CVE-2011-2082HistoryJun 04, 2012 - 7:00 p.m.
CVE-2011-2082
2012-06-0419:00:00
mitre
www.cve.org
1
The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords after accounts are re-enabled, via a brute-force attack on the database. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0009.
Related
ubuntucve
ubuntucve
CVE-2011-2082
2012-06-04 00:00:00
CVE-2011-0009
2011-01-25 00:00:00
nvd
nvd
CVE-2011-2082
2012-06-04 19:55:01
CVE-2011-0009
2011-01-25 19:00:03
prion
prion
Design/Logic Flaw
2012-06-04 19:55:00
Default credentials
2011-01-25 19:00:00
debiancve
debiancve
CVE-2011-2082
2012-06-04 19:55:01
cve
cve
CVE-2011-2082
2012-06-04 19:55:01
CVE-2011-0009
2011-01-25 19:00:03
nessus
nessus
Fedora 15 : rt3-3.8.9-1.fc15 (2011-1677)
2011-03-03 00:00:00
Debian DSA-2150-1 : request-tracker3.6 - unsalted password hashing
2011-01-25 00:00:00
openvas
openvas
Request Tracker Password Information Disclosure Vulnerability
2011-01-24 00:00:00
Debian Security Advisory DSA 2150-1 (request-tracker3.6)
2011-03-07 00:00:00
Request Tracker Password Information Disclosure Vulnerability
2011-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: rt3-3.8.9-1.fc15
2011-03-03 03:21:54
[SECURITY] Fedora 15 Update: rt3-3.8.12-1.fc15
2012-06-02 03:52:20
[SECURITY] Fedora 16 Update: rt3-3.8.12-1.fc16
2012-06-02 03:58:24
debian
debian
[BSA-022] Security Update for request-tracker3.8
2011-01-24 07:22:34
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
2011-01-22 11:13:26
[SECURITY] [DSA 2480-1] request-tracker3.8 security update
2012-05-24 17:37:03
cvelist
cvelist
CVE-2011-0009
2011-01-25 18:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
2011-01-24 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-01-24 00:00:00
[SECURITY] [DSA 2480-1] request-tracker3.8 security update
2012-06-03 00:00:00
osv
osv
request-tracker3.8 - several
2012-09-15 00:00:00
request-tracker3.8 - regression
2012-09-15 00:00:00
request-tracker3.8 - regression
2012-09-15 00:00:00
freebsd
freebsd
RT -- Multiple Vulnerabilities
2012-05-22 00:00:00