CVE-2012-6579: Bestpractical Request Tracker

Medium severity, CVSS 6.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service (loss of e-mail readability), via an e-mail message to a queue's address.

Affected products

• Bestpractical Request Tracker: version 3.8.3 only; version 3.8.4 only; version 3.8.7 only; version 3.8.9 only; version 3.8.10 only; version 3.8.11 only; …

Published 2013-07-24. Last modified 2026-06-16.