Lucene search
MitreCVE-2014-9472HistoryMar 09, 2015 - 2:59 p.m.
CVE-2014-9472
2015-03-0914:59:02
CWE-399
mitre
web.nvd.nist.gov
40
email gateway
rt
remote attackers
denial of service
crafted email
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
8
Confidence
High
EPSS
0.014
Percentile
86.6%
The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.
Affected configurations
Node
debiandebian_linuxMatch7.0
Node
fedoraprojectfedoraMatch21
ORfedoraprojectfedoraMatch22
Node
bestpracticalrequest_trackerMatch3.6.8
ORbestpracticalrequest_trackerMatch3.6.10
ORbestpracticalrequest_trackerMatch3.6.11
ORbestpracticalrequest_trackerMatch3.8.3
ORbestpracticalrequest_trackerMatch3.8.4
ORbestpracticalrequest_trackerMatch3.8.7
ORbestpracticalrequest_trackerMatch3.8.9
ORbestpracticalrequest_trackerMatch3.8.10
ORbestpracticalrequest_trackerMatch3.8.11
ORbestpracticalrequest_trackerMatch3.8.12
ORbestpracticalrequest_trackerMatch3.8.13
ORbestpracticalrequest_trackerMatch3.8.14
ORbestpracticalrequest_trackerMatch3.8.15
ORbestpracticalrequest_trackerMatch3.8.16
ORbestpracticalrequest_trackerMatch3.8.17
ORbestpracticalrequest_trackerMatch4.0.0
ORbestpracticalrequest_trackerMatch4.0.1
ORbestpracticalrequest_trackerMatch4.0.2
ORbestpracticalrequest_trackerMatch4.0.3
ORbestpracticalrequest_trackerMatch4.0.4
ORbestpracticalrequest_trackerMatch4.0.5
ORbestpracticalrequest_trackerMatch4.0.6
ORbestpracticalrequest_trackerMatch4.0.7
ORbestpracticalrequest_trackerMatch4.0.8
ORbestpracticalrequest_trackerMatch4.0.9
ORbestpracticalrequest_trackerMatch4.0.10
ORbestpracticalrequest_trackerMatch4.0.11
ORbestpracticalrequest_trackerMatch4.0.12
ORbestpracticalrequest_trackerMatch4.0.13
ORbestpracticalrequest_trackerMatch4.0.14
ORbestpracticalrequest_trackerMatch4.0.15
ORbestpracticalrequest_trackerMatch4.0.16
ORbestpracticalrequest_trackerMatch4.0.17
ORbestpracticalrequest_trackerMatch4.0.18
ORbestpracticalrequest_trackerMatch4.0.19
ORbestpracticalrequest_trackerMatch4.0.20
ORbestpracticalrequest_trackerMatch4.0.21
ORbestpracticalrequest_trackerMatch4.0.22
ORbestpracticalrequest_trackerMatch4.2.0
ORbestpracticalrequest_trackerMatch4.2.1
ORbestpracticalrequest_trackerMatch4.2.2
ORbestpracticalrequest_trackerMatch4.2.3
ORbestpracticalrequest_trackerMatch4.2.4
ORbestpracticalrequest_trackerMatch4.2.5
ORbestpracticalrequest_trackerMatch4.2.6
ORbestpracticalrequest_trackerMatch4.2.7
ORbestpracticalrequest_trackerMatch4.2.8
ORbestpracticalrequest_trackerMatch4.2.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | debian_linux | 7.0 | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
| fedoraproject | fedora | 21 | cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:* |
| fedoraproject | fedora | 22 | cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.6.8 | cpe:2.3:a:bestpractical:request_tracker:3.6.8:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.6.10 | cpe:2.3:a:bestpractical:request_tracker:3.6.10:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.6.11 | cpe:2.3:a:bestpractical:request_tracker:3.6.11:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.8.3 | cpe:2.3:a:bestpractical:request_tracker:3.8.3:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.8.4 | cpe:2.3:a:bestpractical:request_tracker:3.8.4:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.8.7 | cpe:2.3:a:bestpractical:request_tracker:3.8.7:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 3.8.9 | cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2014-9472
2015-03-09 00:00:00
cvelist
cvelist
CVE-2014-9472
2015-03-09 14:00:00
debiancve
debiancve
CVE-2014-9472
2015-03-09 14:59:02
nvd
nvd
CVE-2014-9472
2015-03-09 14:59:02
prion
prion
Design/Logic Flaw
2015-03-09 14:59:00
nessus
nessus
Request Tracker 4.0.x < 4.0.23 / 4.2.x < 4.2.10 Multiple Vulnerabilities
2015-04-29 00:00:00
Debian DSA-3176-1 : request-tracker4 - security update
2015-02-27 00:00:00
Fedora 21 : rt-4.2.10-2.fc21 (2015-4666)
2015-04-07 00:00:00
debian
debian
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DLA 158-1] request-tracker3.8 security update
2015-02-27 00:26:38
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
freebsd
freebsd
osv
osv
request-tracker3.8 - security update
2015-02-27 00:00:00
request-tracker4 - security update
2015-02-26 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3176-1)
2015-02-25 00:00:00
Fedora Update for rt FEDORA-2015-4698
2015-07-07 00:00:00
Debian: Security Advisory (DLA-158-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
2015-04-04 07:20:34
[SECURITY] Fedora 22 Update: rt-4.2.10-2.fc22
2015-03-31 21:48:30
securityvulns
securityvulns
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-03-23 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
8
Confidence
High
EPSS
0.014
Percentile
86.6%
Related for CVE-2014-9472