18 March 2011

25 results · Feed

• Unscored —
  CVE-2011-1433

  The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cle…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7278

  The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly c…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7281

  Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon C…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7280

  Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly h…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7279

  The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to …

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7283

  Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated use…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7277

  Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge perm…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7275

  Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote atta…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7282

  Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when th…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2008-7276

  Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 127…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4766

  The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4758

  installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text ty…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4768

  Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authen…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4763

  The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict t…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4761

  The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly re…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4762

  Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before …

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4765

  Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows r…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4767

  Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4759

  Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the sco…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4764

  Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypt…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4760

  Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing …

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5056

  Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a q…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5055

  Open Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit substrings of the Cust…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5057

  The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environme…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2011-1148

  Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers…

  Mar 18, 2011