Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-4765
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4765

2022-10-0316:21:05
Debian Security Bug Tracker
security-tracker.debian.org
8
cve-2010-4765
race condition
kernel::system::main::filewrite
otrs
ticketcounter.log
remote authenticated users
opportunistic circumstances
creating tickets
unix

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

53.5%

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets.

OSVersionArchitecturePackageVersionFilename
Debian11allotrs2< 2.4.8+dfsg1-1otrs2_2.4.8+dfsg1-1_all.deb

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

53.5%

Related for DEBIANCVE:CVE-2010-4765