diff options
| author | skv <skv@FreeBSD.org> | 2011-08-19 03:06:26 +0800 |
|---|---|---|
| committer | skv <skv@FreeBSD.org> | 2011-08-19 03:06:26 +0800 |
| commit | 78d2bdbe4eef4eadc6c590338e2b476be880de2d (patch) | |
| tree | a76de16ddee7d3703dce6633586deb24d956d30f /security | |
| parent | f1888e502598ace4f83fc8a012394bc22840eab8 (diff) | |
| download | freebsd-ports-gnome-78d2bdbe4eef4eadc6c590338e2b476be880de2d.tar.gz freebsd-ports-gnome-78d2bdbe4eef4eadc6c590338e2b476be880de2d.tar.zst freebsd-ports-gnome-78d2bdbe4eef4eadc6c590338e2b476be880de2d.zip | |
Document "otrs" - vulnerabilities in OTRS-Core allows read access
to any file on local file system.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 5016a0d5505e..e92de5fd9ad8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="86baa0d4-c997-11e0-8a8e-00151735203a"> + <topic>OTRS -- Vulnerabilities in OTRS-Core allows read access to any file on local file system</topic> + <affects> + <package> + <name>otrs</name> + <range><gt>2.1.*</gt><lt>3.0.10</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>OTRS Security Advisory reports:</p> + <blockquote cite="http://otrs.org/advisory/OSA-2011-03-en/"> + <ul> + <li>An attacker with valid session and admin permissions could + get read access to any file on the servers local operating system. + For this it would be needed minimum one installed OTRS package.</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2011-2746</cvename> + <url>http://otrs.org/advisory/OSA-2011-03-en/</url> + </references> + <dates> + <discovery>2011-08-16</discovery> + <entry>2011-08-18</entry> + </dates> + </vuln> + <vuln vid="834591a9-c82f-11e0-897d-6c626dd55a41"> <topic>mozilla -- multiple vulnerabilities</topic> <affects> |