CVE

Id
46060  
CVE No.
CVE-2010-3476  
Status
Candidate  
Description
Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service (CPU consumption) via a large message, a different vulnerability than CVE-2010-2080.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501000 46060 CVE-2010-3476 CONFIRM:http://otrs.org/advisory/OSA-2010-02-en/  View
501001 46060 CVE-2010-3476 CONFIRM:http://security-tracker.debian.org/tracker/CVE-2010-2080  View
501002 46060 CVE-2010-3476 SUSE:SUSE-SR:2010:024  View
501003 46060 CVE-2010-3476 URL:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html  View
501004 46060 CVE-2010-3476 BID:43264  View
501005 46060 CVE-2010-3476 URL:http://www.securityfocus.com/bid/43264  View
501006 46060 CVE-2010-3476 SECUNIA:41381  View
501007 46060 CVE-2010-3476 URL:http://secunia.com/advisories/41381  View
501008 46060 CVE-2010-3476 XF:otrs-regexpression-dos(61869)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37353 JVNDB-2010-003138 ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性 ApPHP PHP MicroCMS の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-3480 46060 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003138.html  View