NetSight
medium4.0

CVE-2010-4759

Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote auth…

Impact

Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.

Affected products

VendorProductAffected versions
OtrsOtrs
through 3.0.0
Versions 0.5, 1.0, 1.0.0, 1.0.1, 1.0.2

Weakness classification

References