Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address.
References
Link | Resource |
---|---|
http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html | Patch Vendor Advisory |
http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:46
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html - Patch, Vendor Advisory |
Information
Published : 2013-07-24 12:01
Updated : 2024-11-21 01:46
NVD link : CVE-2012-6579
Mitre link : CVE-2012-6579
CVE.ORG link : CVE-2012-6579
JSON object : View
Products Affected
bestpractical
- request_tracker
CWE
CWE-310
Cryptographic Issues