CVE-2008-7276

Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local…

published March 18, 2011

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Published
2011-03-18T16:00Z
EPSS history
Timeline
  • 18 MAR 16:00Z
    Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local…
    cvelistv5