This host is installed with OTRS (Open Ticket Request System) and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to obtain potentially sensitive e-mail address information or cause the application to crash by creating a denial of service condition. Impact Level: Application

Upgrade to OTRS (Open Ticket Request System) version 2.2.7 or later, For updates refer to http://www.otrs.com/en/

-An error exists in Kernel/System/EmailParser.pm in PostmasterPOP3.pl which does not properly handle e-mail messages containing malformed UTF-8 characters - An error exists in otrs-email.pm, which sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients

OTRS (Open Ticket Request System) version before 2.2.7

Get the installed version of OTRS with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/74026
• http://osvdb.org/74027

---

Updated on 2015-03-25