CVE-2011-1007

Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout...

CVE-2011-1008

ScripsOverlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information,...

PT-2011-2810

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions prior to 3.8.9 Description The issue allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT...

PT-2011-2811

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions prior to 3.8.9 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors. This is demonstrated by custom-field value information, related to SQL logging...

CVE-2011-1007: Undefined Security Weakness

Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout...

CVE-2011-1008: Undefined Security Weakness

ScripsOverlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information,...

CVE-2011-0009

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database...

CVE-2011-0009

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database...

CVE-2011-0009

CVE-2011-0009 affects Best Practical Solutions RT 3.x (before 3.8.9rc2) and RT 4.x (before 4.0.0rc4), where password hashes used MD5, enabling context-dependent attackers to brute-force the database and recover cleartext passwords. DebRAN/Debian advisories note an incomplete fix in CVE-2011-0009 ...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix two security issues and three bugs are now available for Red Hat Enterprise MRG 1.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise MRG 1.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise MRG 1.2. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel-rt packages contain the Linux kernel, the core of any...

Fedora Core 11 FEDORA-2009-12827 (rt3)

The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12827. OpenVAS Vulnerability Test $Id: fcore200912827.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12827 rt3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 12 FEDORA-2009-12783 (rt3)

The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12783. OpenVAS Vulnerability Test $Id: fcore200912783.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12783 rt3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD Ports: rt

The remote host is missing an update to the system as announced in the referenced advisory. VID 714c1406-e4cf-11de-883a-003048590f9e OpenVAS Vulnerability Test $ Description: Auto generated from VID 714c1406-e4cf-11de-883a-003048590f9e Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 11 : rt3-3.8.2-12.fc11 (2009-12827)

Fri Dec 4 2009 Ralf Corsepius - 3.8.2-12 - Add rt-3.8.2-rh-bz543962.diff BZ 543962. - Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 -...

FreeBSD Ports: rt

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RedHat Security Advisory RHSA-2009:1635

The remote host is missing updates announced in advisory RHSA-2009:1635. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a NULL pointer dereference flaw was found in the NFSv4 implementation in the...

FreeBSD : rt -- Session fixation vulnerability (714c1406-e4cf-11de-883a-003048590f9e)

Secunia reports : A vulnerability has been reported in RT, which can be exploited by malicious people to conduct session fixation attacks. The vulnerability is caused due to an error in the handling of sessions and can be exploited to hijack another user's session by tricking the user into loggin...

RedHat Security Advisory RHSA-2009:1635

The remote host is missing updates announced in advisory RHSA-2009:1635. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a NULL pointer dereference flaw was found in the NFSv4 implementation in the...