PT-2011-2011 · Best Practical Solutions · Rt

CVE-2011-0009 · Publicado 2011-01-25 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 3.x through 3.8.9rc1 Best Practical Solutions RT versions 4.x through 4.0.0rc3

Description The issue makes it easier for attackers to determine cleartext passwords via a brute-force attack on the database, due to the use of the MD5 algorithm for password hashes.

Recommendations For versions 3.x through 3.8.9rc1, update to version 3.8.9rc2 or later. For versions 4.x through 4.0.0rc3, update to version 4.0.0rc4 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2011-0009

DSA-2150-1

Produtos afetados

Rt

Referências · 14

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610850 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0009 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054740.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0009 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=672250 · Correção
• http://securityfocus.com/bid/45959 · Nota
• http://lists.bestpractical.com/pipermail/rt-announce/2011-January/000185.html · Correção
• http://osvdb.org/70661 · Nota
• http://secunia.com/advisories/43438 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0475 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0190 · Aviso do Fabricante
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E · Nota
• http://vupen.com/english/advisories/2011/0576 · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2150 · Aviso do Fabricante