CVE-2009-5057

Опубликовано: 18 мар. 2011

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*

Версия до 2.3.3 (включая)

cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.0:beta1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.0:beta2:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.0:beta3:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.0:beta4:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.0:rc1:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00275

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2009-5057

ubuntu

почти 15 лет назад

CVE-2009-5057

debian

почти 15 лет назад

The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 d ...

GHSA-867g-gm3j-m6qw

github

больше 3 лет назад

EPSS

Процентиль: 51%

0.00275

Низкий

5 Medium

CVSS2

Дефекты

CWE-310