CVE-2011-2385

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.

• CWE-264

• http://osvdb.org/73885
• http://otrs.org/advisory/OSA-2011-02-en/Patch, Vendor Advisory
• http://secunia.com/advisories/45227Vendor Advisory
• http://www.securityfocus.com/bid/48678
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68558
• http://osvdb.org/73885
• http://otrs.org/advisory/OSA-2011-02-en/Patch, Vendor Advisory
• http://secunia.com/advisories/45227Vendor Advisory
• http://www.securityfocus.com/bid/48678
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68558

Published

Jul 19, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2378The appendChild function in Mozilla Firefox before 3.6.20, T…
• CVE-2011-2379Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 thr…
• CVE-2011-2380Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x b…
• CVE-2011-2381CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22…
• CVE-2011-2382Microsoft Internet Explorer 8 and earlier, and Internet Expl…
• CVE-2011-2383Microsoft Internet Explorer 9 and earlier does not properly …
• CVE-2011-2386VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site S…
• CVE-2011-2391The IPv6 implementation in the kernel in Apple iOS before 7 …
• CVE-2011-2393The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2011-2395The Neighbor Discovery (ND) protocol implementation in Cisco…
• CVE-2011-2397The Agent service in Iron Mountain Connected Backup 8.4 allo…
• CVE-2011-2398Unspecified vulnerability in the dynamic loader in HP HP-UX …