PT-2011-1713 · Otrs · Otrs

Published 2011-03-18 · Updated 2011-03-22 · CVE-2010-4764

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions 2.4.9 and earlier Open Ticket Request System (OTRS) versions 3.x before 3.0.3

Description The issue concerns the handling of incoming encrypted e-mail messages based on revoked PGP or GPG keys. It does not present warnings about such messages, making it easier for remote attackers to spoof e-mail communication by leveraging a revoked key with a revocation signature.

Recommendations For Open Ticket Request System (OTRS) versions 2.4.9 and earlier, update to version 2.4.10 or later. For Open Ticket Request System (OTRS) versions 3.x before 3.0.3, update to version 3.0.3 or later.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-4764

Affected Products

Otrs

References · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4764 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-4764 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4764 · Vendor Advisory
• http://bugs.otrs.org/show_bug.cgi?id=6131 · Note
• http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4764 · Note