Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-4458

Overview

Vulnerability Score 6.8 6.8
CVE Id CVE-2011-4458
Last Modified 28 Sep 2012 11:13:03
Published 04 Jun 2012 03:55:01
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2011-4458

Summary

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.

Vulnerable Systems

Application

  • Bestpractical Rt 3.6.0

  • Bestpractical Rt 3.6.1

  • Bestpractical Rt 3.6.10

  • Bestpractical Rt 3.6.2

  • Bestpractical Rt 3.6.3

  • Bestpractical Rt 3.6.4

  • Bestpractical Rt 3.6.5

  • Bestpractical Rt 3.6.6

  • Bestpractical Rt 3.6.7

  • Bestpractical Rt 3.6.8

  • Bestpractical Rt 3.6.9

  • Bestpractical Rt 3.7.1

  • Bestpractical Rt 3.7.5

  • Bestpractical Rt 3.7.80

  • Bestpractical Rt 3.7.85

  • Bestpractical Rt 3.7.86

  • Bestpractical Rt 3.8.0

  • Bestpractical Rt 3.8.1

  • Bestpractical Rt 3.8.10

  • Bestpractical Rt 3.8.11

  • Bestpractical Rt 3.8.2

  • Bestpractical Rt 3.8.3

  • Bestpractical Rt 3.8.4

  • Bestpractical Rt 3.8.5

  • Bestpractical Rt 3.8.6

  • Bestpractical Rt 3.8.7

  • Bestpractical Rt 3.8.8

  • Bestpractical Rt 3.8.9

  • Bestpractical Rt 4.0.0

  • Bestpractical Rt 4.0.1

  • Bestpractical Rt 4.0.2

  • Bestpractical Rt 4.0.3

  • Bestpractical Rt 4.0.4

  • Bestpractical Rt 4.0.5


References

MLIST - [rt-announce] 20120522 RT 4.0.6 Released - Security Release

MLIST - [rt-announce] 20120522 RT 3.8.12 Released - Security Release

MLIST - [rt-announce] 20120522 Security vulnerabilities in RT

BID - 53660

SECUNIA - 49259


Last Updated: 27 May 2016 10:49:36