request-tracker4 - several

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2012-4733

  Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" per…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3368

  bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary fi…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3369

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3370

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback …

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3371

  Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows re…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3372

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Dis…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3373

  CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attacker…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3374

  Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::S…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-5587

  Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allo…

  request-tracker4 Debian
  Aug 23, 2013