Improper input validation in Otrs

CVE-2008-7280

Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote attackers to cause a denial of service (e-mail retrieval outage) via a crafted message.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.

Affected products

  • Otrs — versions 0.5, 1.0, 1.0.0
  • N/a — versions n/a

Weakness classification (CWE)

References