Vulnerabilites related to otrs - iphonehandle
CVE-2011-2385 (GCVE-0-2011-2385)
Vulnerability from cvelistv5
Published
2011-07-19 20:00
Modified
2024-08-06 23:00
Severity ?
CWE
  • n/a
Summary
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
References
http://osvdb.org/73885 vdb-entry, x_refsource_OSVDB
http://otrs.org/advisory/OSA-2011-02-en/ x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/68558 vdb-entry, x_refsource_XF
http://www.securityfocus.com/bid/48678 vdb-entry, x_refsource_BID
http://secunia.com/advisories/45227 third-party-advisory, x_refsource_SECUNIA
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:00:33.848Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "73885",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/73885"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://otrs.org/advisory/OSA-2011-02-en/"
          },
          {
            "name": "otrs-iphonehandle-priv-escalation(68558)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"
          },
          {
            "name": "48678",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48678"
          },
          {
            "name": "45227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45227"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-07-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "73885",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/73885"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://otrs.org/advisory/OSA-2011-02-en/"
        },
        {
          "name": "otrs-iphonehandle-priv-escalation(68558)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"
        },
        {
          "name": "48678",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48678"
        },
        {
          "name": "45227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45227"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-2385",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "73885",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/73885"
            },
            {
              "name": "http://otrs.org/advisory/OSA-2011-02-en/",
              "refsource": "CONFIRM",
              "url": "http://otrs.org/advisory/OSA-2011-02-en/"
            },
            {
              "name": "otrs-iphonehandle-priv-escalation(68558)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"
            },
            {
              "name": "48678",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48678"
            },
            {
              "name": "45227",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45227"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-2385",
    "datePublished": "2011-07-19T20:00:00",
    "dateReserved": "2011-06-05T00:00:00",
    "dateUpdated": "2024-08-06T23:00:33.848Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2011-07-19 20:55
Modified
2025-04-11 00:51
Severity ?
Summary
The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.
References
cve@mitre.orghttp://osvdb.org/73885
cve@mitre.orghttp://otrs.org/advisory/OSA-2011-02-en/Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/45227Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/48678
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/68558
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/73885
af854a3a-2127-422b-91ae-364da2661108http://otrs.org/advisory/OSA-2011-02-en/Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/45227Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/48678
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/68558
Impacted products
Vendor Product Version
otrs iphonehandle 0.9.1
otrs iphonehandle 0.9.2
otrs iphonehandle 0.9.3
otrs iphonehandle 0.9.4
otrs iphonehandle 0.9.5
otrs iphonehandle 0.9.6
otrs iphonehandle 1.0.1
otrs iphonehandle 1.0.2
otrs otrs *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "166CEE25-B287-47B8-92A4-96D504F5C3A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "440BEDBC-5E1F-41A3-B327-31E0A5B72621",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6A91FD-7B80-4572-8966-055038473E0B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "19F565FC-D1FF-43B8-8C00-C11FAC90E9D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "93B55CE0-0113-4790-AC6F-5523D1B0E126",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A65E58C-C4D3-47C9-83E4-C7CF2E9103C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "269242CA-918A-4537-8A51-E9AFE80F14B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "76856D48-6075-49F2-8C76-C3D6AC0985FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DC98827-8C46-4D35-A3A8-106040AE0499",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El paquete iPhoneHandle v0.9.x anterior a v0.9.7 y v1.0.x anterios a v1.0.3 en Open Ticket Request System (OTRS) no restringe adecuadamente el uso de intefaces de iPhoneHandle, lo que permite a usuarios autenticados de forma remota obtener privilegios, y en consecuencia, leer o modificar objetos OTRS, a trav\u00e9s de vectores desconocidos."
    }
  ],
  "id": "CVE-2011-2385",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-07-19T20:55:01.117",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/73885"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://otrs.org/advisory/OSA-2011-02-en/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45227"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/48678"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/73885"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://otrs.org/advisory/OSA-2011-02-en/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45227"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/48678"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}