PT-2012-1887 · Best Practical Solutions+5 · Request Tracker+2

Publicado 2012-06-04 · Atualizado 2012-09-29 · CVE-2011-4458

Mitre

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-4458

DSA-2480-1

Produtos afetados

Request Tracker

Request-Tracker4

Rt

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2011-4458 · Nota de Segurança
• http://secunia.com/advisories/49259 · Nota
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html · Aviso do Fabricante
• http://securityfocus.com/bid/53660 · Nota
• https://osv.dev/vulnerability/CVE-2011-4458 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4458 · Aviso do Fabricante
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4458 · Nota
• http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-4458 · Aviso do Fabricante