Lucene search
Ubuntu.comUB:CVE-2011-0009HistoryJan 25, 2011 - 12:00 a.m.
CVE-2011-0009
2011-01-2500:00:00
ubuntu.com
ubuntu.com
15
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.9%
Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4
uses the MD5 algorithm for password hashes, which makes it easier for
context-dependent attackers to determine cleartext passwords via a
brute-force attack on the database.
Notes
| Author | Note |
|---|---|
| jdstrand | for Lucid, please test packages in lucid-proposed and report in https://launchpad.net/bugs/750339 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | request-tracker3.8 | < 3.8.7-1ubuntu2.2 | UNKNOWN |
| ubuntu | 10.10 | noarch | request-tracker3.8 | < 3.8.8-4ubuntu0.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | request-tracker3.8 | < 3.8.10-1 | UNKNOWN |
Related
securityvulns
securityvulns
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
2011-01-24 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-01-24 00:00:00
[SECURITY] [DSA 2480-1] request-tracker3.8 security update
2012-06-03 00:00:00
cve
cve
CVE-2011-0009
2011-01-25 19:00:03
CVE-2011-2082
2012-06-04 19:55:01
cvelist
cvelist
CVE-2011-0009
2011-01-25 18:00:00
CVE-2011-2082
2012-06-04 19:00:00
debian
debian
[SECURITY] [DSA 2150-1] request-tracker3.6 security update
2011-01-22 11:13:26
[BSA-022] Security Update for request-tracker3.8
2011-01-24 07:22:34
[SECURITY] [DSA 2480-1] request-tracker3.8 security update
2012-05-24 17:37:03
openvas
openvas
Request Tracker Password Information Disclosure Vulnerability
2011-01-24 00:00:00
Debian: Security Advisory (DSA-2150-1)
2011-03-07 00:00:00
Debian Security Advisory DSA 2150-1 (request-tracker3.6)
2011-03-07 00:00:00
nvd
nvd
CVE-2011-0009
2011-01-25 19:00:03
CVE-2011-2082
2012-06-04 19:55:01
nessus
nessus
Debian DSA-2150-1 : request-tracker3.6 - unsalted password hashing
2011-01-25 00:00:00
Fedora 15 : rt3-3.8.9-1.fc15 (2011-1677)
2011-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: rt3-3.8.9-1.fc15
2011-03-03 03:21:54
prion
prion
Default credentials
2011-01-25 19:00:00
Design/Logic Flaw
2012-06-04 19:55:00
ubuntucve
ubuntucve
CVE-2011-2082
2012-06-04 00:00:00
debiancve
debiancve
CVE-2011-2082
2012-06-04 19:55:01
osv
osv
request-tracker3.8 - several
2012-09-15 00:00:00
request-tracker3.8 - regression
2012-09-15 00:00:00
request-tracker3.8 - regression
2012-09-15 00:00:00
freebsd
freebsd
RT -- Multiple Vulnerabilities
2012-05-22 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.9%
Related for UB:CVE-2011-0009