{"action":"Upgrade otrs2 to 2.4.5-1 or later.","affected":[{"fixed":"2.4.5-1","introduced":"0"}],"component":"otrs2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["2.4.5-1"],"id":"tcs_01M5N9F7VBGF54PNAB0EGN7GKX","modified_at":"2026-08-31T06:47:38.543633698Z","published_at":"2011-03-18T16:55:01.547Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2009-5057","https://security-tracker.debian.org/tracker/CVE-2009-5057"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2009-5057","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2009-5057"}],"summary":"The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decr"}