CVE:CVE-2017-16921
CNNVD:CNNVD-201711-917
OTRS（Open-source Ticket Request System）是德国OTRS集团的一套开源缺陷跟踪管理系统软件。该软件将电话，邮件等各种渠道提交进来的服务请求归类为不同的队列、服务级别，服务人员通过OTRS系统来跟踪和回复客户。
OTRS 6.0.x版本至6.0.1版本、5.0.x版本至5.0.24版本和4.0.x版本至4.0.26版本中存在安全漏洞。攻击者可利用该漏洞执行任意的shell命令。
solution:Upgrade otrs otrs to a higher version than 4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17,4.0.18,4.0.19,4.0.20,4.0.21,4.0.22,4.0.23,4.0.24,4.0.25,4.0.26,5.0.0,5.0.0:alpha1,5.0.0:beta1,5.0.0:beta2,5.0.0:beta3,5.0.0:beta4,5.0.0:beta5,5.0.0:rc1,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.14,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.20,5.0.21,5.0.22,5.0.23,5.0.24,6.0.0,6.0.0:alpha1,6.0.0:beta1,6.0.0:beta2,6.0.0:beta3,6.0.0:beta4,6.0.0:beta5,6.0.0:rc1,6.0.1,and avoid the version 4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.0.14,4.0.15,4.0.16,4.0.17,4.0.18,4.0.19,4.0.20,4.0.21,4.0.22,4.0.23,4.0.24,4.0.25,4.0.26,5.0.0,5.0.0:alpha1,5.0.0:beta1,5.0.0:beta2,5.0.0:beta3,5.0.0:beta4,5.0.0:beta5,5.0.0:rc1,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.14,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.20,5.0.21,5.0.22,5.0.23,5.0.24,6.0.0,6.0.0:alpha1,6.0.0:beta1,6.0.0:beta2,6.0.0:beta3,6.0.0:beta4,6.0.0:beta5,6.0.0:rc1,6.0.1; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0
solution:Upgrade swftools swftools to a higher version than 0.9.2,and avoid the version 0.9.2