CVE-2011-1008

NameCVE-2011-1008
DescriptionScrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs614576

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
request-tracker3.6sourcelenny3.6.7-5+lenny6
request-tracker3.8sourcesqueeze3.8.8-7+squeeze1
request-tracker3.8source(unstable)3.8.10-1614576

Search for package or bug name: Reporting problems