{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-07-14T00:00:00", "descriptions": [{"lang": "en", "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "73885", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/73885"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://otrs.org/advisory/OSA-2011-02-en/"}, {"name": "otrs-iphonehandle-priv-escalation(68558)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"}, {"name": "48678", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/48678"}, {"name": "45227", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/45227"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2011-2385", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "73885", "refsource": "OSVDB", "url": "http://osvdb.org/73885"}, {"name": "http://otrs.org/advisory/OSA-2011-02-en/", "refsource": "CONFIRM", "url": "http://otrs.org/advisory/OSA-2011-02-en/"}, {"name": "otrs-iphonehandle-priv-escalation(68558)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"}, {"name": "48678", "refsource": "BID", "url": "http://www.securityfocus.com/bid/48678"}, {"name": "45227", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/45227"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T23:00:33.848Z"}, "title": "CVE Program Container", "references": [{"name": "73885", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/73885"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://otrs.org/advisory/OSA-2011-02-en/"}, {"name": "otrs-iphonehandle-priv-escalation(68558)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"}, {"name": "48678", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/48678"}, {"name": "45227", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/45227"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-2385", "datePublished": "2011-07-19T20:00:00", "dateReserved": "2011-06-05T00:00:00", "dateUpdated": "2024-08-06T23:00:33.848Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "166CEE25-B287-47B8-92A4-96D504F5C3A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "440BEDBC-5E1F-41A3-B327-31E0A5B72621", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "7F6A91FD-7B80-4572-8966-055038473E0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "19F565FC-D1FF-43B8-8C00-C11FAC90E9D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "93B55CE0-0113-4790-AC6F-5523D1B0E126", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:0.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "6A65E58C-C4D3-47C9-83E4-C7CF2E9103C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "269242CA-918A-4537-8A51-E9AFE80F14B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:iphonehandle:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "76856D48-6075-49F2-8C76-C3D6AC0985FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DC98827-8C46-4D35-A3A8-106040AE0499", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors."}, {"lang": "es", "value": "El paquete iPhoneHandle v0.9.x anterior a v0.9.7 y v1.0.x anterios a v1.0.3 en Open Ticket Request System (OTRS) no restringe adecuadamente el uso de intefaces de iPhoneHandle, lo que permite a usuarios autenticados de forma remota obtener privilegios, y en consecuencia, leer o modificar objetos OTRS, a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2011-2385", "lastModified": "2024-11-21T01:28:10.863", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-07-19T20:55:01.117", "references": [{"source": "[email protected]", "url": "http://osvdb.org/73885"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://otrs.org/advisory/OSA-2011-02-en/"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/45227"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/48678"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/73885"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://otrs.org/advisory/OSA-2011-02-en/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/45227"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/48678"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68558"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "[email protected]", "type": "Primary"}]}

{}