More information : http://otrs.org/advisory/OSA-2008-01-en/
Suggested workaround by OTRS (other than upgrading to 2.2.6 / 2.1.8 : As a workaround you can remove the file bin/cgi-bin/rpc.pl or update bin/cgi-bin/rpc.pl from cvs to version 1.6 (http://cvs.otrs.org/viewvc.cgi/otrs/bin/cgi-bin/rpc.pl). -- [otrs2] [CVE-2008-1515] information disclosure https://bugs.launchpad.net/bugs/214993 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs