mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
255 lines
8.8 KiB
JSON
255 lines
8.8 KiB
JSON
{
|
|
"id": "CVE-2011-0456",
|
|
"sourceIdentifier": "vultures@jpcert.or.jp",
|
|
"published": "2011-03-11T17:55:02.667",
|
|
"lastModified": "2024-11-21T01:24:01.533",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a \"command injection vulnerability.\""
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Se presenta una vulnerabilidad en el archivo webscript.pl en Open Ticket Request System (OTRS) versi\u00f3n 2.3.4 y anteriores, permite a los atacantes remotos ejecutar comandos arbitrarios por medio de vectores no especificados, relacionados a una \"command injection vulnerability.\""
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
|
"baseScore": 7.5,
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 10.0,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-78"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "2.3.4",
|
|
"matchCriteriaId": "9E3A920C-BAF4-4252-B543-4FE1828043A5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BE712DC3-5CA0-4157-A501-483BBDBF7B0D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "86CD9921-3CFC-49F7-9C91-5049E41ADD15"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "49CBB470-37A6-4D09-BA71-8EAB8931554E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "63608BED-2700-4EF7-9038-B295FF373FD0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5386B686-3421-4F4E-AC5E-6567FE12E03B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0E712714-6E03-43BA-B375-929638730B44"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E7BAB384-AC74-4D75-BFE2-8CBC2C0A830F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E365F79A-BDDA-430D-B39F-FADADA91A0F6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DC9223D9-B5F8-4D9A-98F8-5D73852B2E0C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BC91C532-9CCD-4353-A6C3-E297A1F5BD77"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6BAAB79E-8DC5-4BFF-9BD2-9215DA2B775D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E9C7B601-0CBD-4861-855E-A4F64157A8D3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B715EC14-D79A-4CB4-A875-380F66A45C3D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "20C9C4DB-4E5D-4D01-B174-D6682831B184"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6D25611D-231B-4CBA-8DC3-5F6CE90ADA56"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "091E423C-A9D5-4ED8-93C7-5CDD57DC3B00"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CAEC4E93-34C5-418B-B12C-CABE500D5171"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "75BE131A-342E-475C-9522-E53A8A8A1BA0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EF62E279-212F-40B4-B2B3-429D6A6164BA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D6FEFC32-3880-4CEA-9AD1-B1669A3CACE7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A0A9CD5E-655A-423B-805B-8953122D2509"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "64BCF69B-4DB6-423E-BCE9-7CAEA74B1568"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9307C840-9EEE-4A23-8FAF-258D683E14A0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2A6F2752-5D88-4007-96C8-DFA1697B0AC0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "55F536B9-11F6-4F3F-9293-25D23F987C9E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CD6DF09D-A8D8-4C77-A4C9-46BD570C2CE1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:otrs:otrs:2.3.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D7ECE7F6-7A82-420C-A440-522331667B43"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://jvn.jp/en/jp/JVN73162541/index.html",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/43960",
|
|
"source": "vultures@jpcert.or.jp",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://hermes.opensuse.org/messages/7797670",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "http://jvn.jp/en/jp/JVN73162541/index.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/43960",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://hermes.opensuse.org/messages/7797670",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |