CVE

Id
15099  
CVE No.
CVE-2005-3895  
Status
Candidate  
Description
Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary web script or HTML. NOTE: this particular issue is referred to as XSS by some sources.  
Phase
Assigned (20051129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
117583 15099 CVE-2005-3895 BUGTRAQ:20051122 OTRS 1.x/2.x Multiple Security Issues  View
117584 15099 CVE-2005-3895 URL:http://marc.info/?l=bugtraq&m=113272360804853&w=2  View
117585 15099 CVE-2005-3895 FULLDISC:20051122 OTRS 1.x/2.x Multiple Security Issues  View
117586 15099 CVE-2005-3895 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html  View
117587 15099 CVE-2005-3895 MISC:http://moritz-naumann.com/adv/0007/otrsmulti/0007.txt  View
117588 15099 CVE-2005-3895 CONFIRM:http://otrs.org/advisory/OSA-2005-01-en/  View
117589 15099 CVE-2005-3895 DEBIAN:DSA-973  View
117590 15099 CVE-2005-3895 URL:http://www.debian.org/security/2006/dsa-973  View
117591 15099 CVE-2005-3895 SUSE:SUSE-SR:2005:030  View
117592 15099 CVE-2005-3895 URL:http://www.novell.com/linux/security/advisories/2005_30_sr.html  View
117593 15099 CVE-2005-3895 BID:15537  View
117594 15099 CVE-2005-3895 URL:http://www.securityfocus.com/bid/15537/  View
117595 15099 CVE-2005-3895 VUPEN:ADV-2005-2535  View
117596 15099 CVE-2005-3895 URL:http://www.vupen.com/english/advisories/2005/2535  View
117597 15099 CVE-2005-3895 OSVDB:21066  View
117598 15099 CVE-2005-3895 URL:http://www.osvdb.org/21066  View
117599 15099 CVE-2005-3895 SECUNIA:17685  View
117600 15099 CVE-2005-3895 URL:http://secunia.com/advisories/17685/  View
117601 15099 CVE-2005-3895 SECUNIA:18101  View
117602 15099 CVE-2005-3895 URL:http://secunia.com/advisories/18101  View
117603 15099 CVE-2005-3895 SECUNIA:18887  View
117604 15099 CVE-2005-3895 URL:http://secunia.com/advisories/18887  View
117605 15099 CVE-2005-3895 SREASON:200  View
117606 15099 CVE-2005-3895 URL:http://securityreason.com/securityalert/200  View
117607 15099 CVE-2005-3895 XF:otrs-email-attachment-xss(23355)  View

Related JVN