PT-2012-5636 · Best Practical · Request Tracker

Publicado 2012-11-11 · Atualizado 2012-11-15 · CVE-2012-4884

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Request Tracker (RT) versions 3.8.x through 3.8.14 Request Tracker (RT) versions 4.0.x through 4.0.7

Description The issue allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client.

Recommendations For versions 3.8.x through 3.8.14, update to version 3.8.15 or later. For versions 4.0.x through 4.0.7, update to version 4.0.8 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-4884

DSA-2567-1

Produtos afetados

Request Tracker

Referências · 7

• https://security-tracker.debian.org/tracker/CVE-2012-4884 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2012-4884 · Aviso do Fabricante
• http://debian.org/security/2012/dsa-2567 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4884 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4884 · Nota
• http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4884 · Nota de Segurança