CVE-2009-5057 | BDVDB-2026-45522 Detail

Description#

The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugs.otrs.org/show_bug.cgi?id=3462
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807

Exploit#

No public exploit known

History#

Version 12011-03-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.