Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address.
References
Link | Resource |
---|---|
http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2013-07-24 05:01
Updated : 2013-07-25 21:00
NVD link : CVE-2012-6579
Mitre link : CVE-2012-6579
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
bestpractical
- request_tracker