CVE-2006-2169: Medium severity Best Practical Solutions Request Tracker vulnerability
Published May 4, 2006
·Updated
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message.
Affected Software
1 affected component
Best Practical Solutions Request Tracker=3.5.head
Event History
May 4, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2169?
CVE-2006-2169 is rated as a medium severity vulnerability as it allows attackers to disclose sensitive information.
2
How do I fix CVE-2006-2169?
To mitigate CVE-2006-2169, ensure that Request Tracker is updated to a secure version or restrict access to the Dist/Display.html page.
3
What kind of information can be exposed by CVE-2006-2169?
CVE-2006-2169 can expose the installation path of the Request Tracker software in error messages.
4
Who is affected by CVE-2006-2169?
CVE-2006-2169 affects users running Request Tracker version 3.5.HEAD.
5
Can CVE-2006-2169 lead to further attacks?
Yes, the exposure of installation paths due to CVE-2006-2169 may assist attackers in conducting more targeted attacks.