CVE-2010-4767

OTRS < 2.3.6 - Denial of Service via Malformed UTF-8 From Header

Title source: llm
STIX 2.1

Description

Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox.

References (2)

Core 2
Core References
Various Sources x_refsource_confirm
http://bugs.otrs.org/show_bug.cgi?id=3426

Scores

EPSS 0.0169
EPSS Percentile 74.4%

Details

CWE
CWE-20
Status published
Products (29)
otrs/otrs 0.5 beta1 (8 CPE variants)
otrs/otrs 1.0 rc1 (3 CPE variants)
otrs/otrs 1.0.0
otrs/otrs 1.0.1
otrs/otrs 1.0.2
otrs/otrs 1.1 rc1
otrs/otrs 1.1.0 rc1 (2 CPE variants)
otrs/otrs 1.1.1
otrs/otrs 1.1.2
otrs/otrs 1.1.3
... and 19 more
Published Mar 18, 2011
Tracked Since Feb 18, 2026