PT-2012-5561

Name of the Vulnerable Software and Affected Versions Request Tracker versions 3.8.12 through 3.8.14 Request Tracker versions 4.0.6 through 4.0.7 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for specific requests, such as toggling ticket...

[SECURITY] [DSA 2567-1] request-tracker3.8 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2567-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2012 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2567-1 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2567-1. OpenVAS Vulnerability Test $Id: deb25671.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2567-1 request-tracker3.8 Authors: Thomas Reinke Copyright: Copyright c 20...

Debian DSA-2567-1 : request-tracker3.8 - several vulnerabilities

Several vulnerabilities were discovered in Request Tracker RT, an issue tracking system. - CVE-2012-4730 Authenticated users can add arbitrary headers or content to mail generated by RT. - CVE-2012-4732 A CSRF vulnerability may allow attackers to toggle ticket bookmarks. - CVE-2012-4734 If users...

Debian: Security Advisory (DSA-2567-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2568-1] rtfm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2568-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2567-1] request-tracker3.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2567-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2012 http://www.debian.org/security/faq -...

DSA-2568-1 rtfm - privilege escalation

Bulletin has no description...

DSA-2567-1 request-tracker3.8 - several

Bulletin has no description...

DSA-2480-4 request-tracker3.8 - regression

Bulletin has no description...

Debian DSA-2535-1 : rtfm - XSS

It was discovered that rtfm, the Request Tracker FAQ Manager, contains multiple cross-site scripting vulnerabilities in the topic administration page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian: Security Advisory (DSA-2535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2535-1] rtfm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2535-1 [email protected] http://www.debian.org/security/ Florian Weimer August 29, 2012 http://www.debian.org/security/faq -...

DSA-2535-1 rtfm - cross-site scripting

Bulletin has no description...

DEBIAN-CVE-2012-2769

Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified...

Request Tracker 3.x < 3.8.12 / 4.x < 4.0.6 Multiple Vulnerabilities

According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 3.x prior to 3.8.12 or version 4.x prior to 4.0.6. It is, therefore, potentially affected by the following vulnerabilities : - The 'vulnerable-passwords' scri...

Debian DSA-2480-4 : request-tracker3.8 - several vulnerabilities

Several vulnerabilities were discovered in Request Tracker, an issue tracking system : - CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. - CVE-2011-2083 Several cross-site scripting issues have been discovered. -...

DSA-2480-3 request-tracker3.8 - regression

Bulletin has no description...

DEBIAN-CVE-2011-4460

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account...

DEBIAN-CVE-2011-4459

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership...