FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-23 14:57:51 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
7a92e958-5207-11e7-8d7c-6805ca0b3d42	rt and dependent modules -- multiple security vulnerabilities BestPractical reports: Please reference CVE/URL list for details Discovery 2017-06-15 Entry 2017-06-15 rt42 ge 4.2.0 lt 4.2.13_1 rt44 ge 4.4.0 lt 4.4.1_1 p5-RT-Authen-ExternalAuth ge 0.9 lt 0.27 http://lists.bestpractical.com/pipermail/rt-announce/2017-June/000297.html CVE-2015-7686 CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944
cdc4ff0e-d736-11e1-8221-e0cb4e266481	p5-RT-Authen-ExternalAuth -- privilege escalation The RT development team reports: RT::Authen::ExternalAuth 0.10 and below (for all versions of RT) are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this vulnerability. Users of RT 3.8.2 and above should upgrade to RT::Authen::ExternalAuth 0.11, which resolves this vulnerability. Discovery 2012-07-25 Entry 2012-07-26 p5-RT-Authen-ExternalAuth < 0.11 http://blog.bestpractical.com/2012/07/security-vulnerabilities-in-three-commonly-deployed-rt-extensions.html CVE-2012-2770

VuXML ID

Description

7a92e958-5207-11e7-8d7c-6805ca0b3d42

rt and dependent modules -- multiple security vulnerabilities

BestPractical reports:

Please reference CVE/URL list for details

Discovery 2017-06-15
Entry 2017-06-15
rt42

ge 4.2.0 lt 4.2.13_1

rt44

ge 4.4.0 lt 4.4.1_1

p5-RT-Authen-ExternalAuth

ge 0.9 lt 0.27

http://lists.bestpractical.com/pipermail/rt-announce/2017-June/000297.html
CVE-2015-7686
CVE-2016-6127
CVE-2017-5361
CVE-2017-5943
CVE-2017-5944

cdc4ff0e-d736-11e1-8221-e0cb4e266481

p5-RT-Authen-ExternalAuth -- privilege escalation

The RT development team reports:

RT::Authen::ExternalAuth 0.10 and below (for all versions of RT) are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this vulnerability.

Users of RT 3.8.2 and above should upgrade to RT::Authen::ExternalAuth 0.11, which resolves this vulnerability.

Discovery 2012-07-25
Entry 2012-07-26
p5-RT-Authen-ExternalAuth

< 0.11

http://blog.bestpractical.com/2012/07/security-vulnerabilities-in-three-commonly-deployed-rt-extensions.html
CVE-2012-2770