Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9472
HistoryMar 09, 2015 - 2:59 p.m.

CVE-2014-9472

2015-03-0914:59:02
CWE-399
[email protected]
web.nvd.nist.gov
8

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON

The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.

Affected configurations

Nvd
Node
debiandebian_linuxMatch7.0
Node
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22
Node
bestpracticalrequest_trackerMatch3.6.8
OR
bestpracticalrequest_trackerMatch3.6.10
OR
bestpracticalrequest_trackerMatch3.6.11
OR
bestpracticalrequest_trackerMatch3.8.3
OR
bestpracticalrequest_trackerMatch3.8.4
OR
bestpracticalrequest_trackerMatch3.8.7
OR
bestpracticalrequest_trackerMatch3.8.9
OR
bestpracticalrequest_trackerMatch3.8.10
OR
bestpracticalrequest_trackerMatch3.8.11
OR
bestpracticalrequest_trackerMatch3.8.12
OR
bestpracticalrequest_trackerMatch3.8.13
OR
bestpracticalrequest_trackerMatch3.8.14
OR
bestpracticalrequest_trackerMatch3.8.15
OR
bestpracticalrequest_trackerMatch3.8.16
OR
bestpracticalrequest_trackerMatch3.8.17
OR
bestpracticalrequest_trackerMatch4.0.0
OR
bestpracticalrequest_trackerMatch4.0.1
OR
bestpracticalrequest_trackerMatch4.0.2
OR
bestpracticalrequest_trackerMatch4.0.3
OR
bestpracticalrequest_trackerMatch4.0.4
OR
bestpracticalrequest_trackerMatch4.0.5
OR
bestpracticalrequest_trackerMatch4.0.6
OR
bestpracticalrequest_trackerMatch4.0.7
OR
bestpracticalrequest_trackerMatch4.0.8
OR
bestpracticalrequest_trackerMatch4.0.9
OR
bestpracticalrequest_trackerMatch4.0.10
OR
bestpracticalrequest_trackerMatch4.0.11
OR
bestpracticalrequest_trackerMatch4.0.12
OR
bestpracticalrequest_trackerMatch4.0.13
OR
bestpracticalrequest_trackerMatch4.0.14
OR
bestpracticalrequest_trackerMatch4.0.15
OR
bestpracticalrequest_trackerMatch4.0.16
OR
bestpracticalrequest_trackerMatch4.0.17
OR
bestpracticalrequest_trackerMatch4.0.18
OR
bestpracticalrequest_trackerMatch4.0.19
OR
bestpracticalrequest_trackerMatch4.0.20
OR
bestpracticalrequest_trackerMatch4.0.21
OR
bestpracticalrequest_trackerMatch4.0.22
OR
bestpracticalrequest_trackerMatch4.2.0
OR
bestpracticalrequest_trackerMatch4.2.1
OR
bestpracticalrequest_trackerMatch4.2.2
OR
bestpracticalrequest_trackerMatch4.2.3
OR
bestpracticalrequest_trackerMatch4.2.4
OR
bestpracticalrequest_trackerMatch4.2.5
OR
bestpracticalrequest_trackerMatch4.2.6
OR
bestpracticalrequest_trackerMatch4.2.7
OR
bestpracticalrequest_trackerMatch4.2.8
OR
bestpracticalrequest_trackerMatch4.2.9
VendorProductVersionCPE
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
fedoraprojectfedora21cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
fedoraprojectfedora22cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.6.8cpe:2.3:a:bestpractical:request_tracker:3.6.8:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.6.10cpe:2.3:a:bestpractical:request_tracker:3.6.10:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.6.11cpe:2.3:a:bestpractical:request_tracker:3.6.11:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.3cpe:2.3:a:bestpractical:request_tracker:3.8.3:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.4cpe:2.3:a:bestpractical:request_tracker:3.8.4:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.7cpe:2.3:a:bestpractical:request_tracker:3.8.7:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.9cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 511

Related

cve 1
ubuntucve 1
cvelist 1
debiancve 1
prion 1
nessus 6
debian 3
freebsd 1
osv 2
openvas 6
fedora 2
securityvulns 2
mageia 1
cve
cve
CVE-2014-9472
2015-03-09 14:59:02
ubuntucve
ubuntucve
CVE-2014-9472
2015-03-09 00:00:00
cvelist
cvelist
CVE-2014-9472
2015-03-09 14:00:00
debiancve
debiancve
CVE-2014-9472
2015-03-09 14:59:02
prion
prion
Design/Logic Flaw
2015-03-09 14:59:00
nessus
nessus
Request Tracker 4.0.x < 4.0.23 / 4.2.x < 4.2.10 Multiple Vulnerabilities
2015-04-29 00:00:00
Debian DSA-3176-1 : request-tracker4 - security update
2015-02-27 00:00:00
Fedora 21 : rt-4.2.10-2.fc21 (2015-4666)
2015-04-07 00:00:00
debian
debian
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DLA 158-1] request-tracker3.8 security update
2015-02-27 00:26:38
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
freebsd
freebsd
rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities
2015-02-26 00:00:00
osv
osv
request-tracker3.8 - security update
2015-02-27 00:00:00
request-tracker4 - security update
2015-02-26 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3176-1)
2015-02-25 00:00:00
Fedora Update for rt FEDORA-2015-4698
2015-07-07 00:00:00
Debian: Security Advisory (DLA-158-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
2015-04-04 07:20:34
[SECURITY] Fedora 22 Update: rt-4.2.10-2.fc22
2015-03-31 21:48:30
securityvulns
securityvulns
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-03-23 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2015-03-23 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON
Related for NVD:CVE-2014-9472
cve1ubuntucve1cvelist1debiancve1prion1nessus6debian3freebsd1osv2openvas6fedora2securityvulns2mageia1