PT-2011-1714 · Otrs · Otrs

Publicado 2011-03-18 · Atualizado 2011-03-22 · CVE-2010-4765

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions prior to 2.4.8

Description A race condition exists in the Kernel::System::Main::FileWrite method, allowing remote authenticated users to corrupt the TicketCounter.log data in certain circumstances by creating tickets.

Recommendations For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2010-4765

Produtos afetados

Otrs

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-4765 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4765 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-4765 · Aviso do Fabricante
• http://bugs.otrs.org/show_bug.cgi?id=4936 · Correção
• http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4765 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4765 · Nota