Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-4759
HistoryMar 18, 2011 - 4:55 p.m.

CVE-2010-4759

2011-03-1816:55:01
Debian Security Bug Tracker
security-tracker.debian.org
14
otrs
denial of service
vulnerability
fulltext search
unix

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.002

Percentile

56.9%

Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.

OSVersionArchitecturePackageVersionFilename
Debian11allotrs2< 3.0.8+dfsg1-1otrs2_3.0.8+dfsg1-1_all.deb

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.002

Percentile

56.9%

Related for DEBIANCVE:CVE-2010-4759