Unscored DSA-1944-1 2 CVEs

request-tracker3.4 request-tracker3.6 - session hijack vulnerability

Published Dec 3, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 3

Release	Package	Fixed in
Debian · 4.0	request-tracker3.4	3.4.5-2+etch1
Debian · 4.0	request-tracker3.6	3.6.1-4+etch1
Debian · 5.0	request-tracker3.6	3.6.7-5+lenny3

Vulnerabilities 2

Unscored —

CVE-2009-3585

Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 a…

Dec 2, 2009
Unscored —

CVE-2009-4151

Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 a…

Dec 2, 2009