PT-2011-1713 · Otrs · Otrs

Publicado 2011-03-18 · Atualizado 2011-03-22 · CVE-2010-4764

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 2.4.9 and earlier Open Ticket Request System (OTRS) versions 3.x before 3.0.3

Description The issue concerns the handling of incoming encrypted e-mail messages based on revoked PGP or GPG keys. It does not present warnings about such messages, making it easier for remote attackers to spoof e-mail communication by leveraging a revoked key with a revocation signature.

Recommendations For Open Ticket Request System (OTRS) versions 2.4.9 and earlier, update to version 2.4.10 or later. For Open Ticket Request System (OTRS) versions 3.x before 3.0.3, update to version 3.0.3 or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-4764

Produtos afetados

Otrs

Referências · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4764 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4764 · Nota de Segurança
• http://bugs.otrs.org/show_bug.cgi?id=6131 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4764 · Aviso do Fabricante
• http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4764 · Nota
• https://osv.dev/vulnerability/CVE-2010-4764 · Aviso do Fabricante