CVE-2011-1690

Summary

Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2011/1071
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
• https://bugzilla.redhat.com/show_bug.cgi?id=696795
• http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66794
• http://www.securityfocus.com/bid/47383
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html
• http://www.debian.org/security/2011/dsa-2220
• http://secunia.com/advisories/44189

References

• http://www.vupen.com/english/advisories/2011/1071
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
• https://bugzilla.redhat.com/show_bug.cgi?id=696795
• http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66794
• http://www.securityfocus.com/bid/47383
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html
• http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html
• http://www.debian.org/security/2011/dsa-2220
• http://secunia.com/advisories/44189

• ←Previous
• Next→