CVE-2011-4458: Code Injection

Published Jun 4, 2012

Updated

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.

Affected Software

86 affected components

bestpractical RT=3.8.7

bestpractical RT=3.6.0-pre1

bestpractical RT=3.8.9-rc2

bestpractical RT=4.0.0-rc4

bestpractical RT=3.8.11

bestpractical RT=3.6.4-rc2

bestpractical RT=3.8.8-rc2

bestpractical RT=3.8.9-rc1

bestpractical RT=3.6.6-rc1

bestpractical RT=3.6.7

bestpractical RT=3.6.2

bestpractical RT=3.6.3

bestpractical RT=3.8.2

bestpractical RT=3.8.8-rc4

bestpractical RT=3.6.2-rc1

bestpractical RT=3.6.0-pre0

bestpractical RT=3.6.5-rc1

bestpractical RT=3.6.0

bestpractical RT=3.6.6-rc2

bestpractical RT=3.8.0

bestpractical RT=4.0.3

bestpractical RT=3.6.3-rc4

bestpractical RT=3.8.1-rc1

bestpractical RT=3.8.10

bestpractical RT=4.0.0-rc7

bestpractical RT=4.0.1

bestpractical RT=3.8.3-rc1

bestpractical RT=4.0.0-rc3

bestpractical RT=3.8.9

bestpractical RT=3.6.5-rc2

bestpractical RT=3.8.2-rc2

bestpractical RT=3.8.0-rc1

bestpractical RT=3.8.8-rc3

bestpractical RT=4.0.0-rc8

bestpractical RT=4.0.0-rc6

bestpractical RT=3.8.2-rc1

bestpractical RT=3.6.10

bestpractical RT=3.6.3-rc2

bestpractical RT=3.8.9-rc3

bestpractical RT=3.6.9

bestpractical RT=4.0.0-rc5

bestpractical RT=3.6.6

bestpractical RT=3.6.1-rc2

bestpractical RT=3.6.5

bestpractical RT=3.8.1-rc3

bestpractical RT=4.0.4

bestpractical RT=4.0.0-rc2

bestpractical RT=3.6.2-rc3

bestpractical RT=3.8.4-rc1

bestpractical RT=3.8.1-rc4

bestpractical RT=3.8.5

bestpractical RT=3.6.6-rc3

bestpractical RT=3.6.4-rc1

bestpractical RT=3.6.8

bestpractical RT=3.8.1-rc5

bestpractical RT=3.6.3-rc1

bestpractical RT=3.6.0-rc1

bestpractical RT=3.8.6-rc1

bestpractical RT=4.0.0

bestpractical RT=3.8.8

bestpractical RT=3.8.0-rc3

bestpractical RT=3.8.0-rc2

bestpractical RT=3.7.86

bestpractical RT=3.6.3-rc3

bestpractical RT=4.0.2

bestpractical RT=3.7.80

bestpractical RT=3.6.2-rc4

bestpractical RT=4.0.0-rc1

bestpractical RT=3.8.3

bestpractical RT=3.7.1

bestpractical RT=3.6.1

bestpractical RT=3.8.6

bestpractical RT=3.6.4

bestpractical RT=3.6.0-rc3

bestpractical RT=3.8.1

bestpractical RT=3.8.4

bestpractical RT=3.7.5

bestpractical RT=3.8.1-rc2

bestpractical RT=3.7.85

bestpractical RT=3.6.1-rc1

bestpractical RT=3.8.3-rc2

bestpractical RT=3.6.2-rc5

bestpractical RT=4.0.5

bestpractical RT=3.6.1-pre2

bestpractical RT=3.6.0-rc2

bestpractical RT=3.8.7-rc1

Remediation

Event History

Jun 4, 2012

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-4458?

CVE-2011-4458 has a critical severity rating as it allows remote attackers to execute arbitrary code.

How do I fix CVE-2011-4458?

To fix CVE-2011-4458, upgrade to Best Practical Solutions RT version 3.8.12 or 4.0.6 or later.

Which versions of RT are affected by CVE-2011-4458?

CVE-2011-4458 affects Best Practical Solutions RT versions 3.6.x, 3.7.x, and earlier versions of 3.8.x and 4.x before the mentioned fixed versions.

What are the potential impacts of CVE-2011-4458?

The potential impacts of CVE-2011-4458 include unauthorized code execution which could compromise the server and data.

Is CVE-2011-4458 related to other vulnerabilities?

Yes, CVE-2011-4458 is a different vulnerability compared to CVE-2011-5092 and CVE-2011-5093.

CVE-2011-4458: Code Injection

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2011-4458?

How do I fix CVE-2011-4458?

Which versions of RT are affected by CVE-2011-4458?

What are the potential impacts of CVE-2011-4458?

Is CVE-2011-4458 related to other vulnerabilities?

Company

Resources

Contact