CVE-2014-9472: Undefined Security Weakness

The email gateway in RT aka Request Tracker 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted email...

DLA-158-1 request-tracker3.8 - security update

Bulletin has no description...

PT-2015-4230

Name of the Vulnerable Software and Affected Versions Request Tracker versions 3.0.0 through 4.0.22 Request Tracker versions 4.2.x before 4.2.10 Description The issue allows remote attackers to cause a denial of service, consuming CPU and disk resources, via a crafted email. Recommendations For...

PT-2015-5140

Name of the Vulnerable Software and Affected Versions RT aka Request Tracker versions 3.8.8 through 4.0.22 RT aka Request Tracker versions 4.2.x before 4.2.10 Description The issue allows remote attackers to obtain sensitive RSS feed URLs and ticket data. Recommendations For RT aka Request Tracke...

CVE-2013-3737

The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...

Design/Logic Flaw

The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...

CVE-2013-3737

The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...

CVE-2013-3737

The CVE-2013-3737 issue affects the MobileUI (RT-Extension-MobileUI) for Request Tracker (RT) installations. It concerns MobileUI >=?

CVE-2013-3737

The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...

PT-2014-2709

Name of the Vulnerable Software and Affected Versions Request Tracker versions 4.0.0 through 4.0.12 MobileUI extension versions prior to 1.04 Description The issue allows remote attackers to reuse unauthorized sessions and obtain user preferences and caches. This occurs when using the file-based...

CVE-2013-3737: Exposure of Sensitive Information to an Unauthorized Actor

The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...

Request Tracker 4.2.x < 4.2.5 Email::Address:List Module String Handling DoS

According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 4.2.x prior to 4.2.5. It is, therefore, potentially affected by a denial of service vulnerability due to an algorithmic complexity flaw in the Perl CPAN...

Request Tracker (RT) 4.2.x - 4.2.2 DoS Vulnerability

Request Tracker RT is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-3736

Cross-site scripting XSS vulnerability in the MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

Cross site scripting

Cross-site scripting XSS vulnerability in the MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

CVE-2013-3736

Cross-site scripting XSS vulnerability in the MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

CVE-2013-3736

Cross-site scripting XSS vulnerability in the MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

PT-2014-2708

Name of the Vulnerable Software and Affected Versions Request Tracker versions 4.0.0 through 4.0.12 RT-Extension-MobileUI extension version prior to 1.04 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

CVE-2013-3736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file...

CVE-2013-3370

Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request...