Test ID:	1.3.6.1.4.1.25623.1.0.801857
Category:	Web application abuses
Title:	RT (Request Tracker) Multiple Vulnerabilities
Summary:	Request Tracker is prone to multiple vulnerabilities.
Description:	Summary: Request Tracker is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error when resubmitting form data, which could allow local attackers to gain unauthorized access to a user's account. - An error when logging SQL queries during a user account transition, which could allow attackers to disclose sensitive information. Vulnerability Impact: Successful exploitation could allow remote attackers to bypass certain security restrictions or gain knowledge of sensitive information. Affected Software/OS: RT (Request Tracker) versions prior to 3.8.9. Solution: Upgrade to RT (Request Tracker) version 3.8.9 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1007 https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E http://openwall.com/lists/oss-security/2011/02/22/6 http://openwall.com/lists/oss-security/2011/02/22/12 http://openwall.com/lists/oss-security/2011/02/22/16 http://openwall.com/lists/oss-security/2011/02/23/22 http://openwall.com/lists/oss-security/2011/02/24/7 http://openwall.com/lists/oss-security/2011/02/24/8 http://openwall.com/lists/oss-security/2011/02/24/9 http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html http://osvdb.org/71012 http://secunia.com/advisories/43438 http://www.vupen.com/english/advisories/2011/0475 XForce ISS Database: rt-login-information-disclosure(65771) https://exchange.xforce.ibmcloud.com/vulnerabilities/65771 Common Vulnerability Exposure (CVE) ID: CVE-2011-1008 http://osvdb.org/71011 XForce ISS Database: rt-scripsoverlay-information-disclosure(65772) https://exchange.xforce.ibmcloud.com/vulnerabilities/65772
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.