PT-2005-5582 · Otrs+1 · Otrs+1

Moritz Naumann · Published 1970-01-01 · Updated 2017-07-20 · CVE-2005-3895

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 1.0.0 through 1.3.2 Open Ticket Request System (OTRS) versions 2.0.0 through 2.0.3

Description The issue allows remote attackers to execute arbitrary web script or HTML when the AttachmentDownloadType is set to inline, and the queue moderator attempts to download an e-mail attachment. This can lead to the execution of arbitrary web script or HTML. The problem may be referred to as XSS by some sources. Multiple vulnerabilities in the otrs package of the Debian GNU/Linux operating system can be exploited remotely, leading to a violation of confidentiality, integrity, and availability of protected information.

Recommendations For Open Ticket Request System (OTRS) versions 1.0.0 through 1.3.2, consider changing the AttachmentDownloadType from inline to prevent the rendering of text/html e-mail attachments as HTML in the browser. For Open Ticket Request System (OTRS) versions 2.0.0 through 2.0.3, consider changing the AttachmentDownloadType from inline to prevent the rendering of text/html e-mail attachments as HTML in the browser. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03039

BDU:2015-03040

BDU:2015-03041

CVE-2005-3895

DSA-973-1

Affected Products

Debian

Otrs

References · 23

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3894 · Security Note
• http://debian.org/security/2006/dsa-973 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03039 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-3895 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3893 · Security Note
• https://bdu.fstec.ru/vul/2015-03041 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3895 · Security Note
• http://securityfocus.com/bid/15537 · Patch
• http://secunia.com/advisories/18101 · Vendor Advisory
• http://secunia.com/advisories/18887 · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_30_sr.html · Vendor Advisory
• http://otrs.org/advisory/OSA-2005-01-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03040 · Security Note
• http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt · Vendor Advisory
• http://secunia.com/advisories/17685 · Vendor Advisory