Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.803915
Category:Web application abuses
Title:OTRS < 2.2.7 Email Multiple Vulnerabilities
Summary:OTRS (Open Ticket Request System) is prone to multiple; vulnerabilities.
Description:Summary:
OTRS (Open Ticket Request System) is prone to multiple
vulnerabilities.

Vulnerability Insight:
-An error exists in Kernel/System/EmailParser.pm in
PostmasterPOP3.pl which does not properly handle e-mail messages containing malformed UTF-8
characters

- An error exists in otrs-email.pm, which sends e-mail containing a Bcc header field that lists
the Blind Carbon Copy recipients

Vulnerability Impact:
Successful exploitation will allow remote attackers to obtain
potentially sensitive e-mail address information or cause the application to crash by creating a
denial of service condition.

Affected Software/OS:
OTRS versions prior to 2.2.7.

Solution:
Update to version 2.2.7 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2008-7280
Common Vulnerability Exposure (CVE) ID: CVE-2008-7281
CopyrightCopyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.