Unrated severityNVD Advisory· Published Sep 20, 2010· Updated Jun 16, 2026
CVE-2010-3476
CVE-2010-3476
Description
Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service (CPU consumption) via a large message, a different vulnerability than CVE-2010-2080.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:otrs:otrs:2.4.7:*:*:*:*:*:*:*
- (no CPE)range: <2.3.6 (2.3.x) and <2.4.8 (2.4.x)
Patches
Vulnerability mechanics
References
6- otrs.org/advisory/OSA-2010-02-en/nvdVendor Advisory
- secunia.com/advisories/41381nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlnvd
- security-tracker.debian.org/tracker/CVE-2010-2080nvd
- www.securityfocus.com/bid/43264nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/61869nvd
News mentions
0No linked articles in our index yet.