Lucene search

[email protected]CVE-2008-0862

HistoryFeb 21, 2008 - 1:44 a.m.

CVE-2008-0862

2008-02-2101:44:00

CWE-264

[email protected]

web.nvd.nist.gov

ibm

lotus notes

vulnerability

applet

signing

ecl

nvd

7.5 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection.

CPENameOperatorVersion
ibm:lotus_notesibm lotus noteseq6.0
ibm:lotus_notesibm lotus noteseq7.0
ibm:lotus_notesibm lotus noteseq6.5
ibm:lotus_notesibm lotus noteseq8.0

CPE	Name	Operator	Version
ibm:lotus_notes	ibm lotus notes	eq	6.0
ibm:lotus_notes	ibm lotus notes	eq	7.0
ibm:lotus_notes	ibm lotus notes	eq	6.5
ibm:lotus_notes	ibm lotus notes	eq	8.0

References

secunia.com/advisories/29031

www-1.ibm.com/support/docview.wss?uid=swg21257250

www.vupen.com/english/advisories/2008/0600/references

7.5 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVE-2008-0862

prion1