CVE

Id
37395  
CVE No.
CVE-2008-7278  
Status
Candidate  
Description
The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file.  
Phase
Assigned (20110318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
405363 37395 CVE-2008-7278 CONFIRM:http://bugs.otrs.org/show_bug.cgi?id=2539  View
405364 37395 CVE-2008-7278 CONFIRM:http://bugs.otrs.org/show_bug.cgi?id=2844  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33539 JVNDB-2011-003781 OTRS の Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm におけるアクセス制限を回避される脆弱性 Open Ticket Request System (OTRS) の Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm は、CustomerPanelOwnSelection または CustomerGroupSupport のオプションが有効になっている際、アクセス制限を回避される、または特定のリストまたは待ち行列の書き込み操作が実行される脆弱性が存在します。 CVE-2008-7282 37395 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003781.html  View