This host is installed with Request Tracker and is prone to multiple vulnerabilities.

Successful exploitation could allow remote attackers to bypass certain security restrictions or gain knowledge of sensitive information. Impact Level: Application

Upgrade to RT (Request Tracker) version 3.8.9 or later, For updates refer to http://www.bestpractical.com/rt/

The multiple flaws are caused by, - An error when resubmitting form data, which could allow local attackers to gain unauthorized access to a user's account. - An error when logging SQL queries during a user account transition, which could allow attackers to disclose sensitive information.

RT (Request Tracker) versions prior to 3.8.9

• http://lists.bestpractical.com/pipermail/rt-announce/2011-February/000186.html
• http://secunia.com/advisories/43438
• http://www.vupen.com/english/advisories/2011/0475

---

Updated on 2015-03-25