Launchpad.net

CVE 2012-4884

Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client.

Related bugs and status

CVE-2012-4884 (Candidate) is related to these bugs:

Bug #1004834: Multiple security vulnerabilities in request-tracker3.8

		In	Importance	Status
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu)	Undecided	Invalid
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu Lucid)	Undecided	Fix Released
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu Natty)	Undecided	Invalid
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu Oneiric)	Undecided	Fix Released
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu Precise)	Undecided	Fix Released
1004834	Multiple security vulnerabilities in request-tracker3.8	request-tracker3.8 (Ubuntu Quantal)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

References

MLIST: [rt-announce] 20121025...
DEBIAN: DSA-2567