Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2009-5057

🗓️ 18 Mar 2011 16:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 63 Views

The S/MIME feature in OTRS before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, allowing easier decryption of low-entropy e-mail messages

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2009-5057
18 Mar 201116:55
–attackerkb
Cvelist		CVE-2009-5057
18 Mar 201116:00
–cvelist
Debian CVE		CVE-2009-5057
18 Mar 201116:00
–debiancve
EUVD		EUVD-2009-5013
7 Oct 202500:30
–euvd
NVD		CVE-2009-5057
18 Mar 201116:55
–nvd
OpenVAS		OTRS < 2.3.4 RANDFILE Cryptographic Entropy Weakness Vulnerability
21 Sep 201300:00
–openvas
OSV		DEBIAN-CVE-2009-5057
18 Mar 201116:55
–osv
Prion		Design/Logic Flaw
18 Mar 201116:55
–prion
RedhatCVE		CVE-2009-5057
21 May 202521:04
–redhatcve
UbuntuCve		CVE-2009-5057
18 Mar 201116:55
–ubuntucve
Rows per page
NVD
Node
OR
otrsotrsRange≤2.3.3
otrsotrsMatch0.5beta1
otrsotrsMatch0.5beta2
otrsotrsMatch0.5beta3
otrsotrsMatch0.5beta4
otrsotrsMatch0.5beta5
otrsotrsMatch0.5beta6
otrsotrsMatch0.5beta7
otrsotrsMatch0.5beta8
otrsotrsMatch1.0rc1
otrsotrsMatch1.0rc2
otrsotrsMatch1.0rc3
otrsotrsMatch1.0.0
otrsotrsMatch1.0.1
otrsotrsMatch1.0.2
otrsotrsMatch1.1rc1
otrsotrsMatch1.1.0rc1
otrsotrsMatch1.1.0rc2
otrsotrsMatch1.1.1
otrsotrsMatch1.1.2
otrsotrsMatch1.1.3
otrsotrsMatch1.1.4
otrsotrsMatch1.2.0beta1
otrsotrsMatch1.2.0beta2
otrsotrsMatch1.2.0beta3
otrsotrsMatch1.2.1
otrsotrsMatch1.2.2
otrsotrsMatch1.2.3
otrsotrsMatch1.2.4
otrsotrsMatch1.3.0beta1
otrsotrsMatch1.3.0beta2
otrsotrsMatch1.3.0beta3
otrsotrsMatch1.3.0beta4
otrsotrsMatch1.3.1
otrsotrsMatch1.3.2
otrsotrsMatch1.3.3
otrsotrsMatch2.0.0
otrsotrsMatch2.0.0beta1
otrsotrsMatch2.0.0beta2
otrsotrsMatch2.0.0beta4
otrsotrsMatch2.0.0beta5
otrsotrsMatch2.0.0beta6
otrsotrsMatch2.0.1
otrsotrsMatch2.0.2
otrsotrsMatch2.0.3
otrsotrsMatch2.0.4
otrsotrsMatch2.0.5
otrsotrsMatch2.1.0beta1
otrsotrsMatch2.1.0beta2
otrsotrsMatch2.1.1
otrsotrsMatch2.1.2
otrsotrsMatch2.1.3
otrsotrsMatch2.1.4
otrsotrsMatch2.1.5
otrsotrsMatch2.1.6
otrsotrsMatch2.1.7
otrsotrsMatch2.1.8
otrsotrsMatch2.1.9
otrsotrsMatch2.2.0beta1
otrsotrsMatch2.2.0beta2
otrsotrsMatch2.2.0beta3
otrsotrsMatch2.2.0beta4
otrsotrsMatch2.2.0rc1
otrsotrsMatch2.2.1
otrsotrsMatch2.2.2
otrsotrsMatch2.2.3
otrsotrsMatch2.2.4
otrsotrsMatch2.2.5
otrsotrsMatch2.2.6
otrsotrsMatch2.2.7
otrsotrsMatch2.2.8
otrsotrsMatch2.2.9
otrsotrsMatch2.3.0beta1
otrsotrsMatch2.3.0beta2
otrsotrsMatch2.3.0beta3
otrsotrsMatch2.3.0beta4
otrsotrsMatch2.3.0rc1
otrsotrsMatch2.3.1
otrsotrsMatch2.3.2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 23:14Current
6.8Medium risk
Vulners AI Score6.8
CVSS 25
EPSS0.01645
CWE-310
cve-2009-5057otrss/mimeopensslremote attackerscryptographic operationsemail security
63