CVE-2014-9472
Vulnerability from cvelistv5
Published
2015-03-09 14:00
Modified
2024-08-06 13:47
Severity ?
EPSS score ?
Summary
The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T13:47:40.986Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html" }, { "name": "72832", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/72832" }, { "name": "DSA-3176", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3176" }, { "name": "FEDORA-2015-4698", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html" }, { "name": "FEDORA-2015-4666", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-02-26T00:00:00", "descriptions": [ { "lang": "en", "value": "The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2015-04-08T17:57:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html" }, { "name": "72832", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/72832" }, { "name": "DSA-3176", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2015/dsa-3176" }, { "name": "FEDORA-2015-4698", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html" }, { "name": "FEDORA-2015-4666", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-9472", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html", "refsource": "CONFIRM", "url": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html" }, { "name": "72832", "refsource": "BID", "url": "http://www.securityfocus.com/bid/72832" }, { "name": "DSA-3176", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2015/dsa-3176" }, { "name": "FEDORA-2015-4698", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html" }, { "name": "FEDORA-2015-4666", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-9472", "datePublished": "2015-03-09T14:00:00", "dateReserved": "2015-01-03T00:00:00", "dateUpdated": "2024-08-06T13:47:40.986Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2014-9472\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-03-09T14:59:02.667\",\"lastModified\":\"2024-11-21T02:20:58.267\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.\"},{\"lang\":\"es\",\"value\":\"email gateway en RT (tambi\u00e9n conocido como Request Tracker) 3.0.0 hasta 4.x anterior a 4.0.23 y 4.2.x anterior a 4.2.10 permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de CPU y disco) a trav\u00e9s de un email manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:C\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56BDB5A0-0839-4A20-A003-B8CD56F48171\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"253C303A-E577-4488-93E6-68A8DD942C38\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C56979C-C3BE-430D-AFFC-F9C89A907529\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9298A97B-D52F-4B1B-9A90-B102B9D22585\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.6.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47AA840F-9E00-4ABF-BFBC-5ABE88AA0B61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E751355A-5C27-47D5-A501-BE0033BB8E06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB660C2B-9EAB-45E7-83D4-C61B71A70704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6149929E-AC54-484C-9914-BE5B9011B6C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96D2D87E-2C68-44F7-B8C5-922452742A4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDD49949-14EC-4023-8FC5-6BDC5EC64991\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8BF47625-80E7-4B73-8C93-8E022AC2703B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C24F467B-2654-4ED4-B1C9-66BE6D263C72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5947B639-9DA1-401A-A227-31A065B4C1A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E53B005E-8714-4E5D-B026-E22C7FA6DCEA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8B688DE-4F85-4E2C-AC11-03B7AEE52389\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47951328-8CC4-4BD9-ACB7-5D3543305455\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:3.8.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B2A1A08-7109-4411-B632-72C43E29271F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44234832-170D-43E0-9643-19CE57378721\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38CFCCD6-6C5D-41CD-B7FB-D925A46E615C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"814172FB-6F34-4356-8105-70AEBE0B6F6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D282AC9F-E087-4D8D-B467-1D9480B3ABDA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42F21EB3-8CE6-4F87-A5DE-A01AA32B943F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EDB4AD7-96B5-4D72-8C51-23D744D10C46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0096B700-17B5-4158-A736-ECFDF9E9935B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0AF4515-6DB1-406A-878C-6DB32D021BA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54781FF6-D6DC-40A0-BE84-4D0FA3321280\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8555184-9645-4A86-A342-DB2716FA4502\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBB4167E-E120-49E5-B41C-2ED61CEB3CB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A908C589-C929-4DDB-AA04-428604BD13B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B97DF0A9-2C43-41FF-B0A0-D57E4D9F5451\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73AE7380-BD83-4CBD-B800-4ED1C9F2114B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A90AB565-C945-480C-A159-F0D157920C1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC4316AA-3412-4CE8-9757-B5A9875E5113\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"048340BE-7179-4DCD-9A7A-B0C91C384E3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DB14ADD-F24C-4122-9EDE-FCB0E7E53065\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"725F177A-347F-46FB-88BE-3EE8CD340A0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"711FB4EF-6E49-408B-A73D-5AF0E5281919\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2E54887-C460-4778-B570-8A86B51A7DBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E19B8ABA-806D-404B-8303-A487D2276B19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10368C1D-3D9C-4AC8-83B7-3C17F544F533\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"016A9A48-9F12-4842-862F-4A192DA0D924\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D148F2A-F6B1-432A-9743-35BC43E86B40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2445145B-A162-484D-ABDF-053C20FD7E96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15EE6E16-375A-42B0-AE3C-E1FB95E9F466\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83BF8033-9E4D-4B8B-B9E4-E992FE848F4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C68D322-E453-48D5-A5FB-39C744D90858\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3881CA9B-5358-4808-9041-DE3E2FC8927F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A95CE3FD-5311-4644-8417-A74FF6B88458\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1DD1F04-3D0E-4210-8039-073B28ECCD85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26235782-E3A1-4D71-9E82-87DAC822D79D\"}]}]}],\"references\":[{\"url\":\"http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3176\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/72832\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3176\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/72832\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.