medium4.6
CVE-2008-7276
Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local u…
Impact
Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | through 2.3.1 Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2 |