PT-2011-1714 · Otrs · Otrs

Published 2011-03-18 · Updated 2011-03-22 · CVE-2010-4765

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions prior to 2.4.8

Description A race condition exists in the Kernel::System::Main::FileWrite method, allowing remote authenticated users to corrupt the TicketCounter.log data in certain circumstances by creating tickets.

Recommendations For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2010-4765

Affected Products

Otrs

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-4765 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4765 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4765 · Vendor Advisory
• http://bugs.otrs.org/show_bug.cgi?id=4936 · Patch
• https://security-tracker.debian.org/tracker/CVE-2010-4765 · Vendor Advisory
• http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4765 · Note