headers
Stefan Rother | 22 Nov 2005 09:45

OTRS 2.0.4 (Klong Jark Beach) Released

Good morning,

This is the latest release of OTRS 2.0, and contains some bug
fixes and 3 security bug fixes. Detailed informations about the security 
fixes can be found here:

English: http://otrs.org/advisory/OSA-2005-01-en.shtml
German:  http://otrs.org/advisory/OSA-2005-01-de.shtml

The OTRS team recommends all OTRS 2.0.x users to appeal upgrade to OTRS 
2.0.4.

Changes:
========
o fixed bug #922 - rfc quoteing for emails with sender
    like info <at> example.com <info <at> example.com> is now
    "info <at> example.com" <info <at> example.com>
o fixed bug #971 - Invalid agents get LockTimeOut notification
o fixed bug #948 - Invalid agents should not longer get follow-ups
o fixed bug #906 - group names are translated in admin interface
o fixed bug #863 - error after using faq in tickets
o fixed bug #792 - GPG 1.4.1 is no handled correct
o fixed bug #695 - From-Header missing quoting if : is used
o fixed bug #639 - problems with german "umlaute" and
    "," in realname if OE is the sender system
o fixed small bug for WorkingTime calculation
o fixed input check of TimeVacationDays and TimeVacationDaysOneTime
    in admin interface (just integer values allowed)
o fixed time (hour and minute) selection on 0x default selections
    in framework (00 selection if 0x was selected)
(Continue reading)

Permalink | Reply | 0 comments |
headers
OTRS Security Team | 23 Nov 2005 08:31

English: [OSA-2005-01] Vulnerabilities in OTRS core / SQL-Injection and Cross-Site-Scripting


 -----------------------------------------------------------------------
 OTRS Security Advisory 2005-01                      <security <at> otrs.org>
 -----------------------------------------------------------------------
 ID:         OSA-2005-01
 Date:       2005-11-22
 Title:      Vulnerabilities in OTRS-Core allows
             SQL-Injection and Cross-Site-Scripting
 Severity:   Critical
 Product:    OTRS 2.x, OTRS 1.x
 Fixed in:   OTRS 2.0.4, OTRS 1.3.3
 URL:        http://otrs.org/advisory/OSA-2005-01-en/
 -----------------------------------------------------------------------

This Advisory covers three vulnerabilities in the OTRS-System-Core.

SQL-Injection via UNION

  Missing security quoting for SQL statements allows agents the
  manipulation of SQL queries. So it's possible to inject SQL queries
  via UNION statements.

  A malicious user may be able to login successfully without valid
  credentials. Authentication mechanisms other than the database 
  backend authentication are not affected.

  Authenticated users can use this vulnerabilitiy to get records from
  other OTRS database tables. This informations can be used for
  other attacks like session hijacking.
(Continue reading)

Permalink | Reply | 0 comments |
headers
OTRS Security Team | 23 Nov 2005 08:32

German: [OSA-2005-01] Schwachstellen im OTRS-Core erlauben SQL-Injection und Cross-Site-Scripting


 -----------------------------------------------------------------------
 OTRS Security Advisory 2005-01                      <security <at> otrs.org>
 -----------------------------------------------------------------------
 ID:         OSA-2005-01
 Datum:      2005-11-22
 Titel:      Schwachstellen im OTRS-Core erlauben
             SQL-Injection und Cross-Site-Scripting
 Einstufung: Kritisch
 Produkte:   OTRS 2.x, OTRS 1.x
 Behoben in: OTRS 2.0.4, OTRS 1.3.3
 URL:        http://otrs.org/advisory/OSA-2005-01-de/
 -----------------------------------------------------------------------

Dieses Advisory adressiert drei Sicherheitsluecken im OTRS-Systemkern.

SQL-Injection per UNION

  Fehlende Sicherheitsueberpruefungen fuer SQL-Statements ermoeglichen
  einem angemeldeten Benutzer die Manipulation von Abfragen. Per UNION
  lassen sich beliebige SELECT-Statements einschleusen, welche dann von
  der Datenbank verarbeitet werden.

  Ein Angreifer kann diese Schwachstelle gezielt ausnutzen, um das
  Ergebnis einer Anfrage so zu manipulieren, dass eine Benutzeranmeldung
  trotz ungueltiger Anmeldedaten erfolgreich ist. Er kann so unbefugt
  Zugang zum OTRS erhalten. Anfaellig fuer derartige Angriffe sind
  Installationen, welche einen Benutzer gegen eine SQL-Datenbank
  authentisieren.
(Continue reading)

Permalink | Reply | 0 comments |

Gmane