CVE-2011-0456 on Ubuntu 12.04 LTS (precise) - high.
Description:
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."