Skip to content
OpenAdvisories
Unscored DSA-2150-1 1 CVE

request-tracker3.6 - salt password hashing

Published Jan 22, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 request-tracker3.6 3.6.7-5+lenny5

Vulnerabilities 1

  • Unscored —

    Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, whi…