CVE-2017-16921: OS Command Injection
First published: Fri Dec 08 2017(Updated: )
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Otrs Otrs | =4.0.1 | |
| Otrs Otrs | =4.0.2 | |
| Otrs Otrs | =4.0.3 | |
| Otrs Otrs | =4.0.4 | |
| Otrs Otrs | =4.0.5 | |
| Otrs Otrs | =4.0.6 | |
| Otrs Otrs | =4.0.7 | |
| Otrs Otrs | =4.0.8 | |
| Otrs Otrs | =4.0.9 | |
| Otrs Otrs | =4.0.10 | |
| Otrs Otrs | =4.0.11 | |
| Otrs Otrs | =4.0.12 | |
| Otrs Otrs | =4.0.13 | |
| Otrs Otrs | =4.0.14 | |
| Otrs Otrs | =4.0.15 | |
| Otrs Otrs | =4.0.16 | |
| Otrs Otrs | =4.0.17 | |
| Otrs Otrs | =4.0.18 | |
| Otrs Otrs | =4.0.19 | |
| Otrs Otrs | =4.0.20 | |
| Otrs Otrs | =4.0.21 | |
| Otrs Otrs | =4.0.22 | |
| Otrs Otrs | =4.0.23 | |
| Otrs Otrs | =4.0.24 | |
| Otrs Otrs | =4.0.25 | |
| Otrs Otrs | =4.0.26 | |
| Otrs Otrs | =5.0.0 | |
| Otrs Otrs | =5.0.0-alpha1 | |
| Otrs Otrs | =5.0.0-beta1 | |
| Otrs Otrs | =5.0.0-beta2 | |
| Otrs Otrs | =5.0.0-beta3 | |
| Otrs Otrs | =5.0.0-beta4 | |
| Otrs Otrs | =5.0.0-beta5 | |
| Otrs Otrs | =5.0.0-rc1 | |
| Otrs Otrs | =5.0.1 | |
| Otrs Otrs | =5.0.2 | |
| Otrs Otrs | =5.0.3 | |
| Otrs Otrs | =5.0.4 | |
| Otrs Otrs | =5.0.5 | |
| Otrs Otrs | =5.0.6 | |
| Otrs Otrs | =5.0.7 | |
| Otrs Otrs | =5.0.8 | |
| Otrs Otrs | =5.0.9 | |
| Otrs Otrs | =5.0.10 | |
| Otrs Otrs | =5.0.11 | |
| Otrs Otrs | =5.0.12 | |
| Otrs Otrs | =5.0.13 | |
| Otrs Otrs | =5.0.14 | |
| Otrs Otrs | =5.0.15 | |
| Otrs Otrs | =5.0.16 | |
| Otrs Otrs | =5.0.17 | |
| Otrs Otrs | =5.0.18 | |
| Otrs Otrs | =5.0.19 | |
| Otrs Otrs | =5.0.20 | |
| Otrs Otrs | =5.0.21 | |
| Otrs Otrs | =5.0.22 | |
| Otrs Otrs | =5.0.23 | |
| Otrs Otrs | =5.0.24 | |
| Otrs Otrs | =6.0.0 | |
| Otrs Otrs | =6.0.0-alpha1 | |
| Otrs Otrs | =6.0.0-beta1 | |
| Otrs Otrs | =6.0.0-beta2 | |
| Otrs Otrs | =6.0.0-beta3 | |
| Otrs Otrs | =6.0.0-beta4 | |
| Otrs Otrs | =6.0.0-beta5 | |
| Otrs Otrs | =6.0.0-rc1 | |
| Otrs Otrs | =6.0.1 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| debian/otrs2 | 6.0.16-2 6.0.16-2+deb10u1 6.0.32-6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/162295/OTRS-6.0.1-Remote-Command-Execution.html
- https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html
- https://www.debian.org/security/2017/dsa-4066
- https://www.exploit-db.com/exploits/43853/
- https://www.otrs.com/security-advisory-2017-09-security-update-otrs-framework/
- https://bugs.otrs.org/show_bug.cgi?id=13357
- https://github.com/OTRS/otrs/commit/d12797bf1efa6722c2ba9af6d8238446c2903cd1
- https://github.com/OTRS/otrs/commit/d433518d7bd8e9e079af67ef9ea7079cd2f59646
- https://github.com/OTRS/otrs/commit/368bc37f137e6344f4db014ee2e03c38e2fc62d2
- https://github.com/OTRS/otrs/commit/4043ebb2580cd8f87e7758e95bf0d77eea5c82ae
- https://security-tracker.debian.org/tracker/CVE-2017-16921
- collector/nvd-index
- collector/security-tracker-debian
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- vendor/otrs
- canonical/otrs otrs
- version/otrs otrs/4.0.1
- version/otrs otrs/4.0.2
- version/otrs otrs/4.0.3
- version/otrs otrs/4.0.4
- version/otrs otrs/4.0.5
- version/otrs otrs/4.0.6
- version/otrs otrs/4.0.7
- version/otrs otrs/4.0.8
- version/otrs otrs/4.0.9
- version/otrs otrs/4.0.10
- version/otrs otrs/4.0.11
- version/otrs otrs/4.0.12
- version/otrs otrs/4.0.13
- version/otrs otrs/4.0.14
- version/otrs otrs/4.0.15
- version/otrs otrs/4.0.16
- version/otrs otrs/4.0.17
- version/otrs otrs/4.0.18
- version/otrs otrs/4.0.19
- version/otrs otrs/4.0.20
- version/otrs otrs/4.0.21
- version/otrs otrs/4.0.22
- version/otrs otrs/4.0.23
- version/otrs otrs/4.0.24
- version/otrs otrs/4.0.25
- version/otrs otrs/4.0.26
- version/otrs otrs/5.0.0
- version/otrs otrs/5.0.0-alpha1
- version/otrs otrs/5.0.0-beta1
- version/otrs otrs/5.0.0-beta2
- version/otrs otrs/5.0.0-beta3
- version/otrs otrs/5.0.0-beta4
- version/otrs otrs/5.0.0-beta5
- version/otrs otrs/5.0.0-rc1
- version/otrs otrs/5.0.1
- version/otrs otrs/5.0.2
- version/otrs otrs/5.0.3
- version/otrs otrs/5.0.4
- version/otrs otrs/5.0.5
- version/otrs otrs/5.0.6
- version/otrs otrs/5.0.7
- version/otrs otrs/5.0.8
- version/otrs otrs/5.0.9
- version/otrs otrs/5.0.10
- version/otrs otrs/5.0.11
- version/otrs otrs/5.0.12
- version/otrs otrs/5.0.13
- version/otrs otrs/5.0.14
- version/otrs otrs/5.0.15
- version/otrs otrs/5.0.16
- version/otrs otrs/5.0.17
- version/otrs otrs/5.0.18
- version/otrs otrs/5.0.19
- version/otrs otrs/5.0.20
- version/otrs otrs/5.0.21
- version/otrs otrs/5.0.22
- version/otrs otrs/5.0.23
- version/otrs otrs/5.0.24
- version/otrs otrs/6.0.0
- version/otrs otrs/6.0.0-alpha1
- version/otrs otrs/6.0.0-beta1
- version/otrs otrs/6.0.0-beta2
- version/otrs otrs/6.0.0-beta3
- version/otrs otrs/6.0.0-beta4
- version/otrs otrs/6.0.0-beta5
- version/otrs otrs/6.0.0-rc1
- version/otrs otrs/6.0.1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- package-manager/debian