CVE-2012-4884

2012-11-1100:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.7%

JSON

Argument injection vulnerability in Request Tracker (RT) 3.8.x before
3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary
files via unspecified vectors related to the GnuPG client.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchrequest-tracker3.8< 3.8.7-1ubuntu2.3UNKNOWN
ubuntu11.10noarchrequest-tracker3.8< 3.8.10-1ubuntu0.1UNKNOWN
ubuntu12.04noarchrequest-tracker3.8< 3.8.11-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	request-tracker3.8	< 3.8.7-1ubuntu2.3	UNKNOWN
ubuntu	11.10	noarch	request-tracker3.8	< 3.8.10-1ubuntu0.1	UNKNOWN
ubuntu	12.04	noarch	request-tracker3.8	< 3.8.11-1ubuntu0.1	UNKNOWN