Unscored DLA-158-1 3 CVEs

request-tracker3.8 - security update

Published Feb 27, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	request-tracker3.8	3.8.8-7+squeeze8

Vulnerabilities 3

Unscored —

CVE-2014-9472

The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote att…

request-tracker4 Debian

Mar 9, 2015
Unscored —

CVE-2015-1165

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sens…

request-tracker4 Debian

Mar 9, 2015
Unscored —

CVE-2015-1464

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS fe…

request-tracker4 Debian

Mar 9, 2015