I think the best approach is to go for removing the file bin/cgi-bin/rpc.pl because probably most (small) otrs setups don't need SOAP/rpc. It's easy to make a debdiff in the following way : https://wiki.ubuntu.com/PackagingGuide/Recipes/Debdiff
I can't do it right now because I don't have my gpg key on hand. -- [otrs2] [CVE-2008-1515] information disclosure https://bugs.launchpad.net/bugs/214993 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs