Request Tracker 3.x < 3.8.9 Security Bypass and Information Disclosure

According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is a version prior to 3.8.9. It is, therefore, potentially affected by the following vulnerabilities : - If an individual with a valid account logs out of Request Tracke...

Microsoft Releases IE9 Release Candidate With Tracking Protection

The new release candidate of Internet Explorer 9, which Microsoft released earlier this week, includes the company’s implementation of a new privacy technology called Tracking Protection that makes it easier for users to prevent sites from tracking their movements online. The IE9 RC also includes...

PT-2011-2011 · Best Practical Solutions · Rt

Name of the Vulnerable Software and Affected Versions: Best Practical Solutions RT versions 3.x through 3.8.9rc1 Best Practical Solutions RT versions 4.x through 4.0.0rc3 Description: The issue makes it easier for attackers to determine cleartext passwords via a brute-force attack on the database...

[BSA-022] Security Update for request-tracker3.8

Jan Wagner uploaded new packages for request-tracker3.8 which fixed the following security problems: CVE-2011-0009 It was discovered that Request Tracker, an issue tracking system, stored passwords in its database by using an insufficiently strong hashing method. If an attacker would have access ...

[SECURITY] [DSA 2150-1] request-tracker3.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2150-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2011 http://www.debian.org/security/faq -...

Request Tracker (RT) 3.6.x - 3.6.7, 3.8.x - 3.8.8 Information Disclosure Vulnerability

Request Tracker RT is prone to an information disclosure vulnerability because it fails to securely store passwords. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Request Tracker Password Information Disclosure Vulnerability

Request Tracker is prone to an information-disclosure vulnerability because it fails to securely store passwords. Successful attacks can allow a local attacker to gain access to the stored passwords. Request Tracker 3.6.x and 3.8.x are affected; other versions may also be vulnerable. OpenVAS...

[SECURITY] [DSA 2150-1] request-tracker3.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2150-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2011 http://www.debian.org/security/faq -...

DSA-2150-1 request-tracker3.6 - salt password hashing

Bulletin has no description...

Debian DSA-2148-1 : tor - several vulnerabilities

The developers of Tor, an anonymizing overlay network for TCP, found three security issues during a security audit. A heap overflow allowed the execution of arbitrary code CVE-2011-0427 , a denial of service vulnerability was found in the zlib compression handling and some key memory was...

DSA-2148-1 tor - several

Bulletin has no description...

Joomla! Spam Mail Relay Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Spam Mail Relay Date: 11 Jan 2011 Author: Jeff Channell Software Link: http://www.joomla.org/ Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayed to unsuspecting victims via the core...

Joomla! 1.5.22 1.6.0 - com_mailto Spam Mail Relay

Joomla! 1.5.22 1.6.0 - commailto Spam Mail Relay Exploit Title: Joomla! Spam Mail Relay Date: 11 Jan 2011 Author: Jeff Channell Software Link: http://www.joomla.org/ Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayed to unsuspecting victims via the core commailto...

Joomla! 1.5.22 / 1.6.0 - 'com_mailto' Spam Mail Relay

Exploit Title: Joomla! Spam Mail Relay Date: 11 Jan 2011 Author: Jeff Channell Software Link: http://www.joomla.org/ Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayed to unsuspecting victims via the core commailto component. Tested using the following URL:...

Joomla! Spam Mail Relay

Exploit Title: Joomla! Spam Mail Relay Date: 11 Jan 2011 Author: Jeff Channell Software Link: http://www.joomla.org/ Versions: 1.5.22, 1.6.0 Joomla! 1.5.22 & 1.6.0 both allow spam email to be relayed to unsuspecting victims via the core commailto component. Tested using the following URL:...

EUVD-2010-4318

admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

EUVD-2010-4319

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

Multiple vulnerabilities in BugTracker.Net

Core Security - CoreLabsMultiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL: http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker Date published: 2010-11-30 Date of last...

Tracker: SpyEye Not Yet Zeus-Like In Stature

The SpyEye Tracker, a new site that hopes to trace the activity of the budding SpyEye Trojan, went live this week and shows the emerging SpyEye botnet to be global in reach, but still much smaller than the Zeus botnet with which it has merged. SpyEye Tracker has already identified 68 malicious...

My Vacation Tracker DLL Hijacking Exploit (svctaglib.dll)

Exploit for windows platform in category local exploits ========================================================= My Vacation Tracker DLL Hijacking Exploit svctaglib.dll ========================================================= / My Vacation Tracker DLL Hijacking Exploit svctaglib.dll Author :...