CVE-2011-1685

概要

参考情報

• blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html · Vendor Advisory
• lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html · Patch
• lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html · Patch
• secunia.com/advisories/44189 · Vendor Advisory
• debian.org/security/2011/dsa-2220
• securityfocus.com/bid/47383
• vupen.com/english/advisories/2011/1071
• bugzilla.redhat.com/show_bug.cgi · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/66791

rt のその他の脆弱性

• CVE-2014-1474中 5.0Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to caus…
• CVE-2013-5587低 2.6Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers t…
• CVE-2013-3374中 4.3Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session …
• CVE-2013-3373中 5.0CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary…
• CVE-2013-3372中 4.3Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers…