CVE-2011-0456

webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
OS Command Injection
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
otrsotrs
𝑥
≤ 2.3.4
otrsotrs
1.3.2
otrsotrs
1.3.3
otrsotrs
2.0.1
otrsotrs
2.0.2
otrsotrs
2.0.3
otrsotrs
2.0.4
otrsotrs
2.0.5
otrsotrs
2.1.1
otrsotrs
2.1.2
otrsotrs
2.1.3
otrsotrs
2.1.4
otrsotrs
2.1.5
otrsotrs
2.1.6
otrsotrs
2.1.7
otrsotrs
2.1.8
otrsotrs
2.1.9
otrsotrs
2.2.1
otrsotrs
2.2.2
otrsotrs
2.2.3
otrsotrs
2.2.4
otrsotrs
2.2.5
otrsotrs
2.2.6
otrsotrs
2.2.7
otrsotrs
2.2.8
otrsotrs
2.2.9
otrsotrs
2.3.1
otrsotrs
2.3.2
otrsotrs
2.3.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
otrs2
bullseye/non-free
6.0.32-6
fixed
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN73162541/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019
http://secunia.com/advisories/43960
https://hermes.opensuse.org/messages/7797670