Unscored DSA-2670-1 7 CVEs

request-tracker3.8 - several

Published May 22, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	request-tracker3.8	3.8.8-7+squeeze7

Vulnerabilities 7

Unscored —

CVE-2013-3368

bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary fi…

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3369

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions…

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3370

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback …

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3371

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows re…

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3372

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Dis…

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3373

CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attacker…

request-tracker4 Debian

Aug 23, 2013
Unscored —

CVE-2013-3374

Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::S…

request-tracker4 Debian

Aug 23, 2013