Description
Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote attackers to cause a denial of service (e-mail retrieval outage) via a crafted message.
References (2)
Core 2
Core References
Various Sources x_refsource_confirm
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
Patch x_refsource_confirm
http://bugs.otrs.org/show_bug.cgi?id=2934
Scores
EPSS
0.0169
EPSS Percentile
74.4%
Details
CWE
CWE-20
Status
published
Products (29)
otrs/otrs
0.5 beta1 (8 CPE variants)
otrs/otrs
1.0 rc1 (3 CPE variants)
otrs/otrs
1.0.0
otrs/otrs
1.0.1
otrs/otrs
1.0.2
otrs/otrs
1.1 rc1
otrs/otrs
1.1.0 rc1 (2 CPE variants)
otrs/otrs
1.1.1
otrs/otrs
1.1.2
otrs/otrs
1.1.3
... and 19 more
Published
Mar 18, 2011
Tracked Since
Feb 18, 2026