CVE-2012-6581
Publication date 24 July 2013
Last updated 24 July 2024
Ubuntu priority
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and trigger outbound e-mail messages signed by an arbitrary stored secret key, by leveraging a UI e-mail signing privilege.
Status
Package | Ubuntu Release | Status |
---|---|---|
request-tracker3.8 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
request-tracker4 | ||
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |