CVE-2010-4767
EPSS 1.7%
描述
Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox.
如何修補 CVE-2010-4767
要修補 CVE-2010-4767,請將受影響套件升級到下列已修補版本。
- Debian/otrs2—升級至 2.4.5-1 或更新版本
CVE-2010-4767 正在被利用嗎?
低 — EPSS 為 1.7%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 2.4.5-1