Oval Definition:oval:com.ubuntu.precise:def:20122582000
Revision Date:2012-08-23Version:1
Title:CVE-2012-2582 on Ubuntu 12.04 LTS (precise) - low.
Description:Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-2582
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'otrs2' package in precise is affected and needs fixing.
  • BACK