CVE-2011-0009: Bestpractical Rt

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database.

Affected products

• Bestpractical Rt: up to and including 3.8.9; version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2011-01-25. Last modified 2026-06-16.