Description
The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.
References (5)
Core 5
Core References
Vendor Advisory x_refsource_confirm
http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72832
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2015/dsa-3176
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html
Scores
EPSS
0.0283
EPSS Percentile
85.1%
Details
CWE
CWE-399
Status
published
Products (50)
bestpractical/request_tracker
3.6.8
bestpractical/request_tracker
3.6.10
bestpractical/request_tracker
3.6.11
bestpractical/request_tracker
3.8.3
bestpractical/request_tracker
3.8.4
bestpractical/request_tracker
3.8.7
bestpractical/request_tracker
3.8.9
bestpractical/request_tracker
3.8.10
bestpractical/request_tracker
3.8.11
bestpractical/request_tracker
3.8.12
... and 40 more
Published
Mar 09, 2015
Tracked Since
Feb 18, 2026