[SECURITY] [DSA 1944-1] New request-tracker packages fix session hijack vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1944-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2009 http://www.debian.org/security/faq -...

DSA-1944-1 request-tracker3.4 request-tracker3.6 - session hijack vulnerability

Bulletin has no description...

RT: Request Tracker Session Fixation Vulnerability

Binary data 5248.prm...

Best Practical Request Tracker 'Custom Field' HTML Injection Vulnerability

Binary data 5177.prm...

Design/Logic Flaw

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...

CVE-2006-2169: Undefined Security Weakness

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

RT: Request Tracker 'ShowConfigTab' Security Bypass

Binary data 5078.prm...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273

The CVE-2003-0273 entry describes a cross-site scripting (XSS) vulnerability in the web interface of Request Tracker (RT) versions 1.0 through 1.0.7, allowing remote attackers to execute script via message bodies. CVSS v2 base metrics indicate a Medium impact with Partial confidentiality, integri...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...