[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-9472Date: (C)2015-03-13   (M)2023-12-22


The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.1
Exploit Score: 8.6
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
BID-72832
DSA-3176
FEDORA-2015-4666
FEDORA-2015-4698
http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html

CPE    51
cpe:/a:bestpractical:request_tracker:3.8.12
cpe:/a:bestpractical:request_tracker:3.8.11
cpe:/a:bestpractical:request_tracker:3.8.10
cpe:/a:bestpractical:request_tracker:4.0.18
...
CWE    1
CWE-399
OVAL    2
oval:org.secpod.oval:def:108624
oval:org.secpod.oval:def:601973

© SecPod Technologies