← Back

CVE-2013-3368

nvd nist
Published: Aug 23, 2013Modified: Apr 29, 2026

JSON object

Loading...
3.3
Vector
AV:L/AC:M/Au:N/C:N/I:P/A:P
Exploitability: 3.4 / Impact: 4.9
Source: NVD

Description

bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name.

Affected (77)

Products: Bestpractical: Rt
1 product
Rt
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Bestpractical
Version 4.0.0
Version 4.0.0 rc1
Version 4.0.0 rc2
Version 4.0.0 rc3
Version 4.0.0 rc4
Version 4.0.0 rc5
Version 4.0.0 rc6
Version 4.0.0 rc7
Version 4.0.0 rc8
Version 4.0.10
Version 4.0.11
Version 4.0.12
Version 4.0.1
Version 4.0.1 rc1
Version 4.0.1 rc2
Version 4.0.2
Version 4.0.2 rc1
Version 4.0.2 rc2
Version 4.0.3
Version 4.0.3 rc1
Version 4.0.3 rc2
Version 4.0.4
Version 4.0.5
Version 4.0.5 rc1
Version 4.0.6
Version 4.0.7
Version 4.0.7 rc1
Version 4.0.8
Version 4.0.8 rc1
Version 4.0.8 rc2
Version 4.0.9
Configuration B
46 vulnerable
Vulnerable SoftwareAffected Versions
Bestpractical
Version 3.8.0
Version 3.8.0 preflight1
Version 3.8.0 rc1
Version 3.8.0 rc2
Version 3.8.0 rc3
Version 3.8.10
Version 3.8.10 rc1
Version 3.8.11
Version 3.8.11 rc1
Version 3.8.11 rc2
Version 3.8.12
Version 3.8.13
Version 3.8.13 rc1
Version 3.8.13 rc2
Version 3.8.14
Version 3.8.14 rc1
Version 3.8.15
Version 3.8.16
Version 3.8.1
Version 3.8.1 preflight0
Version 3.8.1 rc1
Version 3.8.1 rc2
Version 3.8.1 rc3
Version 3.8.1 rc4
Version 3.8.1 rc5
Version 3.8.2
Version 3.8.2 rc1
Version 3.8.2 rc2
Version 3.8.3
Version 3.8.3 rc1
Version 3.8.3 rc2
Version 3.8.4
Version 3.8.4 rc1
Version 3.8.5
Version 3.8.6
Version 3.8.6 rc1
Version 3.8.7
Version 3.8.7 rc1
Version 3.8.8
Version 3.8.8 rc2
Version 3.8.8 rc3
Version 3.8.8 rc4
Version 3.8.9
Version 3.8.9 rc1
Version 3.8.9 rc2
Version 3.8.9 rc3

References (14)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.