Release: iPhoneHandle 1.0.9 Required OTRS release: OTRS Help Desk 3.0.x Recommended OTRS release: OTRS Help Desk 3.0.9 Status: stable Release: iPhoneHandle 0.9.7 Required OTRS release: OTRS Help Desk 2.4.x Recommended OTRS release: OTRS Help Desk 2.4.10 Status: stable Selected Bugfixes ================= * Security Advisory OSA-2011-02 * Vulnerability in OTRS iPhoneHandle interface allows user with valid session privilege escalation * Severity: Critical * Product: iPhoneHandle 1.0.x (OTRS 3.0), iPhoneHandle 0.9.x (OTRS 2.4) * Fixed in: iPhoneHandle 1.0.3 (OTRS 3.0), iPhoneHandle 0.9.7 (OTRS 2.4) * URL: http://otrs.org/advisory/OSA-2011-02-en/ * CVE: CVE-2011-2385 List of Files and MD5 Message digest (128-bit) checksums ======================================================== 1a520dc848cfccb7417d176ecd6eab02 [ http://ftp.otrs.org/pub/otrs/packages/iPhoneHandle-1.0.3.opm ] 8817cf21424f42db5cea0a9ea095b34e [ http://ftp.otrs.org/pub/otrs/packages/iPhoneHandle-0.9.7.opm ] Feedback & Bug Reporting ========================= We appreciate your contributions! As always, you are re encouraged to tell us what you think, using this feedback e-Mail: [feedback at otrs.org] or by filing a bug in Bugzilla [ http://bugs.otrs.org ]. Professional Services ====================== OTRS Group provides a full set of services for each phase of deployment. Plan, custom engineer, deploy and scale with confidence by relying on our unparalleled expertise. [ http://www.otrs.com/en/services/ ] Community Services ================== * User Forums [ http://forums.otrs.org/ ] * Mailing Lists [ http://lists.otrs.org/ ] * Knowledge Database (FAQ) [ http://faq.otrs.org/ ] * Brainstorm / Ideas [ http://otrsteam.ideascale.com/ ] -- Martin Edenhofer OTRS.org Founder OTRS AG Europaring 4 94315 Straubing T: +49 (0)9421 56818 0 F: +49 (0)9421 56818 18 I: www.otrs.com Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: André Mindermann