Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html | mailing-list x_refsource_MLIST |
| http://secunia.com/advisories/49259 | third-party-advisory x_refsource_SECUNIA |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html | mailing-list x_refsource_MLIST |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html | mailing-list x_refsource_MLIST |
| http://www.securityfocus.com/bid/53660 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html | mailing-list x_refsource_MLIST x_transferred |
| http://secunia.com/advisories/49259 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html | mailing-list x_refsource_MLIST x_transferred |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html | mailing-list x_refsource_MLIST x_transferred |
| http://www.securityfocus.com/bid/53660 | vdb-entry x_refsource_BID x_transferred |
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Primary | 2.0 | 6.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html | cve@mitre.org | Patch Vendor Advisory |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html | cve@mitre.org | Patch Vendor Advisory |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html | cve@mitre.org | Patch Vendor Advisory |
| http://secunia.com/advisories/49259 | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/53660 | cve@mitre.org | N/A |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://secunia.com/advisories/49259 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/53660 | af854a3a-2127-422b-91ae-364da2661108 | N/A |