Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 8:1 p.m.4 views

CVE-2008-7278

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

5CVSS7AI score0.00311EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2013/09/21 12:0 a.m.26 views

OTRS < 2.3.4 RANDFILE Cryptographic Entropy Weakness Vulnerability

Open Ticket Request System OTRS is prone to a cryptographic entropy weakness vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

5CVSS6.4AI score0.00275EPSS
Exploits0
OSV
OSV
added 2011/03/18 4:55 p.m.6 views

CVE-2009-5057

The S/MIME feature in Open Ticket Request System OTRS before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations,...

6.9AI score
Exploits0References2
Prion
Prion
added 2011/03/18 4:55 p.m.21 views

Design/Logic Flaw

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

5CVSS7.2AI score0.00311EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2011/03/18 4:0 p.m.19 views

CVE-2008-7278

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

6.6AI score0.00311EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2011/03/18 4:0 p.m.20 views

CVE-2008-7278

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

5CVSS6.4AI score0.00311EPSS
Exploits0
Rows per page
Query Builder