CVE-2010-0438
Published: 9 February 2010
Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
otrs Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(code not present)
|
| hardy |
Does not exist
|
|
| intrepid |
Does not exist
|
|
| jaunty |
Does not exist
|
|
| karmic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| maverick |
Does not exist
|
|
| natty |
Does not exist
|
|
| oneiric |
Does not exist
|
|
| upstream |
Not vulnerable
|
|
|
otrs2 Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Ignored
(end of life)
|
|
| intrepid |
Released
(2.2.7-2lenny3build0.8.10.1)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Ignored
(end of life)
|
|
| lucid |
Not vulnerable
(2.4.7-1ubuntu0.1)
|
|
| maverick |
Not vulnerable
(2.4.7+dfsg1-1)
|
|
| natty |
Not vulnerable
(2.4.9+dfsg1-3+squeeze1build0.11.04.1)
|
|
| oneiric |
Not vulnerable
|
|
| upstream |
Needed
|