PT-2012-1540

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.11 Best Practical Solutions RT versions 4.x through 4.0.5 Description The issue allows context-dependent attackers to determine cleartext passwords for disabled user accounts, making it easi...

PT-2012-1542

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.11 Best Practical Solutions RT versions 4.x through 4.0.5 Description The issue allows remote authenticated users to read sensitive information, including hashes of former passwords and tick...

PT-2012-1541

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.11 Best Practical Solutions RT versions 4.x through 4.0.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to...

CVE-2011-2082: Undefined Security Weakness

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

PT-2012-1888

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.11 Best Practical Solutions RT versions 4.x through 4.0.5 Description The issue allows remote authenticated users to bypass intended access restrictions by leveraging a group membership, due...

PT-2012-1889

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 2.x through 3.x before 3.8.12 Best Practical Solutions RT versions 4.x before 4.0.6 Description The issue allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a...

[SECURITY] Fedora 16 Update: rt3-3.8.12-1.fc16

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 17 Update: rt3-3.8.12-1.fc17

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

FreeBSD Ports: rt40

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : RT -- Multiple Vulnerabilities (e0a969e4-a512-11e1-90b4-e0cb4e266481)

BestPractical report : Internal audits of the RT codebase have uncovered a number of security vulnerabilities in RT. We are releasing versions 3.8.12 and 4.0.6 to resolve these vulnerabilities, as well as patches which apply atop all released versions of 3.8 and 4.0. The vulnerabilities addressed...

RT -- Multiple Vulnerabilities

BestPractical report: Internal audits of the RT codebase have uncovered a number of security vulnerabilities in RT. We are releasing versions 3.8.12 and 4.0.6 to resolve these vulnerabilities, as well as patches which apply atop all released versions of 3.8 and 4.0. The vulnerabilities addressed ...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix two security issues and various bugs are now available for Red Hat Enterprise MRG 2.1. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...

Fedora 15 : perl-YAML-LibYAML-0.38-2.fc15 (2012-4997)

This update fixes various format string vulnerabilities CVE-2012-1152, CPAN RT46507. The Fedora 15 and Fedora 16 builds also include some bug-fixes from upstream : - Fix for broken deparse test - Fix LoadFile on empty file failure Note that Tenable Network Security has extracted the preceding...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise MRG 2.1. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Important: Red Hat Security Advisory: kernel-rt security update

Updated kernel-rt packages that fix one security issue are now available for Red Hat Enterprise MRG 2.1. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix several security issues and two bugs are now available for Red Hat Enterprise MRG 2.0. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...

CVE-2011-4497

QISwizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request...

Cross site request forgery (csrf)

QISwizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request...

CVE-2011-4497

CVE-2011-4497 affects the ASUS RT-N56U router with firmware prior to 1.0.1.4o. The QIS_wizard.htm page permits remote attackers to disclose the administrator password via a flag=detect request. This is an information-disclosure issue (no exploitation details provided in the primary CVE entry). Op...

CVE-2011-4497

QISwizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request...