CVE-2011-2746

Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors.

Affected Software

Name	Vendor	Start Version	End Version
Otrs	Otrs	2.0.0 (including)	2.0.0 (including)
Otrs	Otrs	2.0.0-beta1 (including)	2.0.0-beta1 (including)
Otrs	Otrs	2.0.0-beta2 (including)	2.0.0-beta2 (including)
Otrs	Otrs	2.0.0-beta4 (including)	2.0.0-beta4 (including)
Otrs	Otrs	2.0.0-beta5 (including)	2.0.0-beta5 (including)
Otrs	Otrs	2.0.0-beta6 (including)	2.0.0-beta6 (including)
Otrs	Otrs	2.0.1 (including)	2.0.1 (including)
Otrs	Otrs	2.0.2 (including)	2.0.2 (including)
Otrs	Otrs	2.0.3 (including)	2.0.3 (including)
Otrs	Otrs	2.0.4 (including)	2.0.4 (including)
Otrs	Otrs	2.0.5 (including)	2.0.5 (including)
Otrs	Otrs	2.1.0-beta1 (including)	2.1.0-beta1 (including)
Otrs	Otrs	2.1.0-beta2 (including)	2.1.0-beta2 (including)
Otrs	Otrs	2.1.1 (including)	2.1.1 (including)
Otrs	Otrs	2.1.2 (including)	2.1.2 (including)
Otrs	Otrs	2.1.3 (including)	2.1.3 (including)
Otrs	Otrs	2.1.4 (including)	2.1.4 (including)
Otrs	Otrs	2.1.5 (including)	2.1.5 (including)
Otrs	Otrs	2.1.6 (including)	2.1.6 (including)
Otrs	Otrs	2.1.7 (including)	2.1.7 (including)
Otrs	Otrs	2.1.8 (including)	2.1.8 (including)
Otrs	Otrs	2.1.9 (including)	2.1.9 (including)
Otrs	Otrs	2.2.0-beta1 (including)	2.2.0-beta1 (including)
Otrs	Otrs	2.2.0-beta2 (including)	2.2.0-beta2 (including)
Otrs	Otrs	2.2.0-beta3 (including)	2.2.0-beta3 (including)
Otrs	Otrs	2.2.0-beta4 (including)	2.2.0-beta4 (including)
Otrs	Otrs	2.2.0-rc1 (including)	2.2.0-rc1 (including)
Otrs	Otrs	2.2.1 (including)	2.2.1 (including)
Otrs	Otrs	2.2.2 (including)	2.2.2 (including)
Otrs	Otrs	2.2.3 (including)	2.2.3 (including)
Otrs	Otrs	2.2.4 (including)	2.2.4 (including)
Otrs	Otrs	2.2.5 (including)	2.2.5 (including)
Otrs	Otrs	2.2.6 (including)	2.2.6 (including)
Otrs	Otrs	2.2.7 (including)	2.2.7 (including)
Otrs	Otrs	2.2.8 (including)	2.2.8 (including)
Otrs	Otrs	2.2.9 (including)	2.2.9 (including)
Otrs	Otrs	2.3.0-beta1 (including)	2.3.0-beta1 (including)
Otrs	Otrs	2.3.0-beta2 (including)	2.3.0-beta2 (including)
Otrs	Otrs	2.3.0-beta3 (including)	2.3.0-beta3 (including)
Otrs	Otrs	2.3.0-beta4 (including)	2.3.0-beta4 (including)
Otrs	Otrs	2.3.0-rc1 (including)	2.3.0-rc1 (including)
Otrs	Otrs	2.3.1 (including)	2.3.1 (including)
Otrs	Otrs	2.3.2 (including)	2.3.2 (including)
Otrs	Otrs	2.3.3 (including)	2.3.3 (including)
Otrs	Otrs	2.3.4 (including)	2.3.4 (including)
Otrs	Otrs	2.3.5 (including)	2.3.5 (including)
Otrs	Otrs	2.3.6 (including)	2.3.6 (including)
Otrs	Otrs	2.4.0-beta1 (including)	2.4.0-beta1 (including)
Otrs	Otrs	2.4.0-beta2 (including)	2.4.0-beta2 (including)
Otrs	Otrs	2.4.0-beta3 (including)	2.4.0-beta3 (including)
Otrs	Otrs	2.4.0-beta4 (including)	2.4.0-beta4 (including)
Otrs	Otrs	2.4.0-beta5 (including)	2.4.0-beta5 (including)
Otrs	Otrs	2.4.0-beta6 (including)	2.4.0-beta6 (including)
Otrs	Otrs	2.4.1 (including)	2.4.1 (including)
Otrs	Otrs	2.4.2 (including)	2.4.2 (including)
Otrs	Otrs	2.4.3 (including)	2.4.3 (including)
Otrs	Otrs	2.4.4 (including)	2.4.4 (including)
Otrs	Otrs	2.4.5 (including)	2.4.5 (including)
Otrs	Otrs	2.4.6 (including)	2.4.6 (including)
Otrs	Otrs	2.4.7 (including)	2.4.7 (including)
Otrs	Otrs	2.4.8 (including)	2.4.8 (including)
Otrs	Otrs	2.4.9 (including)	2.4.9 (including)
Otrs	Otrs	2.4.10 (including)	2.4.10 (including)
Otrs2	Ubuntu	devel	*
Otrs2	Ubuntu	hardy	*
Otrs2	Ubuntu	lucid	*
Otrs2	Ubuntu	maverick	*
Otrs2	Ubuntu	natty	*
Otrs2	Ubuntu	oneiric	*
Otrs2	Ubuntu	precise	*
Otrs2	Ubuntu	quantal	*
Otrs2	Ubuntu	raring	*
Otrs2	Ubuntu	saucy	*
Otrs2	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-2746
CWE	https://cwe.mitre.org/data/definitions/.html

Affected Software

References