RCE in Bestpractical Rt
CVE-2011-4458
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.031 (86.4th percentile) — read the EPSS interpretation.
Affected products
- Bestpractical Rt — versions 3.6.0, 3.6.1, 3.6.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (vdb-entry, x_refsource_BID)