CVE-2008-7280
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-7280
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote attackers to cause a denial of service (e-mail retrieval outage) via a crafted message.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OTRS Kernel/System/EmailParser.pm拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OTRS（Open-source Ticket Request System）是德国OTRS集团的一套开源缺陷跟踪管理系统软件。该软件将电话，邮件等各种渠道提交进来的服务请求归类为不同的队列、服务级别，服务人员通过OTRS系统来跟踪和回复客户。 Open Ticket Request System（OTRS）2.2.7之前版本的PostmasterPOP3.pl中的Kernel/System/EmailParser.pm没有正确处理包含畸形UTF-8字符的电子邮件消息。远程攻击者可以借助特制消息导致拒绝服
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-7280
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-7280
Please Login to view more intelligence information
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807x_refsource_CONFIRM
- http://bugs.otrs.org/show_bug.cgi?id=2934x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2008-7280
Same Patch Batch · n/a · 2011-03-18 · 25 CVEs total
| CVE-2010-4759 | OTRS拒绝服务漏洞 | |
| CVE-2011-1148 | PHP 'substr_replace()'释放后重用远程内存破坏漏洞 | |
| CVE-2011-1433 | OTRS AgentInterface和ustomerInterface组件敏感信息泄露漏洞 | |
| CVE-2010-4768 | OTRS队列访问限制绕过漏洞 | |
| CVE-2010-4767 | OTRS拒绝服务漏洞 | |
| CVE-2010-4766 | OTRS AgentTicketForward功能潜在敏感图像信息泄露漏洞 | |
| CVE-2010-4765 | OTRS Kernel::System::Main::FileWrite方法竞争条件漏洞 | |
| CVE-2010-4764 | OTRS信任管理漏洞 | |
| CVE-2010-4763 | OTRS ACL-customer-status Ticket Type设置ACL限制绕过漏洞 | |
| CVE-2010-4762 | OTRS rich-text-editor组件跨站脚本攻击漏洞 | |
| CVE-2010-4761 | OTRS客户界面ticket-print对话框潜在敏感信息泄露漏洞 | |
| CVE-2010-4760 | OTRS敏感信息泄露漏洞 | |
| CVE-2008-7275 | OTRS多个跨站脚本攻击漏洞 | |
| CVE-2010-4758 | OTRS installer.pl密码泄露漏洞 | |
| CVE-2009-5057 | OTRS S/MIME功能邮件信息泄露漏洞 | |
| CVE-2009-5056 | OTRS输入验证漏洞 | |
| CVE-2009-5055 | OTRS访问限制绕过漏洞 | |
| CVE-2008-7283 | OTRS访问限制绕过和web界面更新漏洞 | |
| CVE-2008-7282 | OTRS CustomerNewTicketQueueSelectionGeneric.pm访问限制绕过漏洞 | |
| CVE-2008-7281 | OTRS敏感电子邮件地址信息泄露漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2008-7280
No comments yet