medium6.8
CVE-2011-4458
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote a…
Impact
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestpractical | Rt | Versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
- http://secunia.com/advisories/49259
- http://www.securityfocus.com/bid/53660
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
- http://secunia.com/advisories/49259
- http://www.securityfocus.com/bid/53660