610 matches found
Security fix for the ALT Linux 6 package request-tracker version 3.8.10-alt1
April 19, 2011 Vladimir V Kamarzin 3.8.10-alt1 - 3.8.10. Security fixes: + CVE-2011-1689 + CVE-2011-1688 + CVE-2011-1687 + CVE-2011-1686 + CVE-2011-1685 - Enhance findreq skiplist...
DSA-2220-1 request-tracker3.8 - several
Bulletin has no description...
RT (Request Tracker) Multiple Vulnerabilities
This host is installed with Request Tracker and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrtmultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ RT Request Tracker Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...
Request Tracker (RT) < 3.8.9 Multiple Vulnerabilities
Request Tracker RT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Request Tracker 3.x < 3.8.9 Security Bypass and Information Disclosure
According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is a version prior to 3.8.9. It is, therefore, potentially affected by the following vulnerabilities : - If an individual with a valid account logs out of Request Tracke...
PT-2011-2011 · Best Practical Solutions · Rt
Name of the Vulnerable Software and Affected Versions: Best Practical Solutions RT versions 3.x through 3.8.9rc1 Best Practical Solutions RT versions 4.x through 4.0.0rc3 Description: The issue makes it easier for attackers to determine cleartext passwords via a brute-force attack on the database...
[BSA-022] Security Update for request-tracker3.8
Jan Wagner uploaded new packages for request-tracker3.8 which fixed the following security problems: CVE-2011-0009 It was discovered that Request Tracker, an issue tracking system, stored passwords in its database by using an insufficiently strong hashing method. If an attacker would have access ...
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2150-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2011 http://www.debian.org/security/faq -...
Request Tracker Password Information Disclosure Vulnerability
Request Tracker is prone to an information-disclosure vulnerability because it fails to securely store passwords. Successful attacks can allow a local attacker to gain access to the stored passwords. Request Tracker 3.6.x and 3.8.x are affected; other versions may also be vulnerable. OpenVAS...
Request Tracker (RT) 3.6.x - 3.6.7, 3.8.x - 3.8.8 Information Disclosure Vulnerability
Request Tracker RT is prone to an information disclosure vulnerability because it fails to securely store passwords. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2150-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2011 http://www.debian.org/security/faq -...
DSA-2150-1 request-tracker3.6 - salt password hashing
Bulletin has no description...
Debian DSA-1944-1 : request-tracker3.4 request-tracker3.6 - session hijack
Mikal Gule discovered that request-tracker, an extensible trouble-ticket tracking system, is prone to an attack, where an attacker with access to the same domain can hijack a user's RT session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Request Tracker (RT) Detection (HTTP)
HTTP based detection of Request Tracker RT. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Request Tracker Detection
The remote web server is running the Best Practical Solutions Request Tracker RT, an open source support ticket application written in Perl. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43004; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate...
Request Tracker Default Credentials
It is possible to log into the Best Practical Solutions Request Tracker RT application by providing default credentials. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
Request Tracker Session Fixation Vulnerability
The version of Best Practical Solutions Request Tracker RT running on the remote web server is affected by a session fixation vulnerability due to the application authenticating users without invalidating their existing session ID. A remote attacker can exploit this by tricking a user into loggin...
[SECURITY] [DSA 1944-1] New request-tracker packages fix session hijack vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1944-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2009 http://www.debian.org/security/faq -...