CVE-2013-3368: Bestpractical Rt

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name.

Affected products

• Bestpractical Rt: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2013-08-23. Last modified 2026-06-16.