CVE-2012-6579: Medium severity request tracker vulnerability
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6579?
CVE-2012-6579 has a moderate severity rating, as it allows remote attackers to potentially disrupt email readability.
How do I fix CVE-2012-6579?
To fix CVE-2012-6579, upgrade your Best Practical Solutions RT to version 3.8.15 or 4.0.8 or later.
What versions are affected by CVE-2012-6579?
CVE-2012-6579 affects Best Practical Request Tracker versions 3.8.x before 3.8.15 and 4.0.x before 4.0.8.
What impact does CVE-2012-6579 have on email services?
CVE-2012-6579 can lead to denial of service by causing a loss of email readability due to incorrect encryption or signing configurations.
Is GnuPG involvement necessary for CVE-2012-6579?
Yes, CVE-2012-6579 involves GnuPG being enabled, which is crucial for the vulnerability to be exploited.