otrs2: [CVE-2007-2524] XSS vulnerability in index.pl

Debian Bug report logs - #423524
otrs2: [CVE-2007-2524] XSS vulnerability in index.pl

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: SALVETTI Djoume <djoume@taket.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: otrs2: [CVE-2007-2524] XSS vulnerability in index.pl

Date: Sat, 12 May 2007 17:31:14 +0200

Package: otrs2
Version: 2.0.4p01-17
Severity: normal
Tags: security


Hi,

According to CVE-2007-2524 :

| Cross-site scripting (XSS) vulnerability in index.pl in OTRS (Open
| Ticket Request System) 2.0.x allows remote attackers to inject
| arbitrary web script or HTML via the Subaction parameter in an
| AgentTicketMailbox Action.

More details and a PoC are available here :

http://www.virtuax.be/?page=library&id=35&type=Exploits

According to this site, 2.2 (in experimental) is not vulnerable, but I
haven't check myself.

I haven't check neither if OTRS 1.X is vulnerable.

Regards.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-powerpc
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)

Message #16 received at 423524-done@bugs.debian.org (full text, mbox, reply):

From: "Torsten Werner" <twerner@debian.org>

To: 423524-done@bugs.debian.org

Subject: otrs2: [CVE-2007-2524] XSS vulnerability in index.pl

Date: Tue, 18 Sep 2007 21:50:08 +0200

The fix is in the current Etch release; closing the bug report now.

Torsten

-- 
blog: http://twerner.blogspot.com/
homepage: http://www.twerner42.de/

Send a report that this bug log contains spam.