CVE-2011-0009

Published Jan 25, 2011 CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Description
Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2150-1 request-tracker3.6 security update
Debian DSA Debian DSA DSA-2480-1 request-tracker3.8 security update
EUVD EUVD EUVD-2011-0036 Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:36 PM
Reserved
Dec 7, 2010, 12:00 AM
Status
Modified
Published
Jan 25, 2011, 7:00 PM
Modified
Jun 16, 2026, 11:26 PM