Pier-Luc Maltais

MantisBT is an open source issue tracker. An unauthenticated attacker who knows a user's email address and username can hijack the user's account by poisoning the link in the password reset notification message.

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors.