Debian 7 DSA-2670-1 Moderate Security Update for Request Tracker

CVE-2013-3368

The rt command line tool uses semi-predictable temporary files. A
malicious user can use this flaw to overwrite files with permissions
of the user running the rt command line tool.

CVE-2013-3369

A malicious user who is allowed to see administration pages can run
arbitrary mason components (without control of arguments), which may
have negative side-effects.

CVE-2013-3370

Request Tracker allows direct requests to private callback
components, which could be used to exploit a Request Tracker
extension or a local callback which uses the arguments passed to it
insecurely.

CVE-2013-3371

Request Tracker is vulnerable to cross-site scripting attacks via
attachment filenames.

CVE-2013-3372

Dominic Hargreaves discovered that Request Tracker is vulnerable to
an HTTP header injection limited to the value of the
Content-Disposition header.

CVE-2013-3373

Request Tracker is vulnerable to a MIME header injection in outgoing
email generated...