ID de Prueba:	1.3.6.1.4.1.25623.1.0.801766
Categoría:	Web application abuses
Título:	OTRS < 2.3.5 Command Execution Vulnerability
Resumen:	Open Ticket Request System (OTRS) is prone to a command; execution vulnerability.
Descripción:	Summary: Open Ticket Request System (OTRS) is prone to a command execution vulnerability. Vulnerability Insight: The flaw is due to certain unspecified input is not properly sanitised before being used. This can be exploited to inject and execute shell commands. Vulnerability Impact: Successful exploitation will allow attackers to execute an arbitrary OS command with the privileges of OTRS on the server where it is installed. Affected Software/OS: OTRS versions prior to 2.3.5. Solution: Update to version 2.3.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0456 http://jvn.jp/en/jp/JVN73162541/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019 http://secunia.com/advisories/43960 SuSE Security Announcement: openSUSE-SU-2011:0278 (Google Search) https://hermes.opensuse.org/messages/7797670
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.