ID de Prueba:	1.3.6.1.4.1.25623.1.0.801857
Categoría:	Web application abuses
Título:	RT (Request Tracker) Multiple Vulnerabilities
Resumen:	Request Tracker is prone to multiple vulnerabilities.
Descripción:	Summary: Request Tracker is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error when resubmitting form data, which could allow local attackers to gain unauthorized access to a user's account. - An error when logging SQL queries during a user account transition, which could allow attackers to disclose sensitive information. Vulnerability Impact: Successful exploitation could allow remote attackers to bypass certain security restrictions or gain knowledge of sensitive information. Affected Software/OS: RT (Request Tracker) versions prior to 3.8.9. Solution: Upgrade to RT (Request Tracker) version 3.8.9 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1007 https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E http://openwall.com/lists/oss-security/2011/02/22/6 http://openwall.com/lists/oss-security/2011/02/22/12 http://openwall.com/lists/oss-security/2011/02/22/16 http://openwall.com/lists/oss-security/2011/02/23/22 http://openwall.com/lists/oss-security/2011/02/24/7 http://openwall.com/lists/oss-security/2011/02/24/8 http://openwall.com/lists/oss-security/2011/02/24/9 http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html http://osvdb.org/71012 http://secunia.com/advisories/43438 http://www.vupen.com/english/advisories/2011/0475 XForce ISS Database: rt-login-information-disclosure(65771) https://exchange.xforce.ibmcloud.com/vulnerabilities/65771 Common Vulnerability Exposure (CVE) ID: CVE-2011-1008 http://osvdb.org/71011 XForce ISS Database: rt-scripsoverlay-information-disclosure(65772) https://exchange.xforce.ibmcloud.com/vulnerabilities/65772
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.