NetSight
medium5.0

CVE-2008-7280

Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malform…

Impact

Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote attackers to cause a denial of service (e-mail retrieval outage) via a crafted message.

Affected products

VendorProductAffected versions
OtrsOtrs
through 2.2.6
Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2

Weakness classification

References