{"id": "CVE-2010-1608", "bulletinFamily": "NVD", "title": "CVE-2010-1608", "description": "Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.", "published": "2010-04-29T13:30:00", "modified": "2017-09-18T21:30:46", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1608", "reporter": "NVD", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/58322", "https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/", "http://www.securityfocus.com/bid/38300"], "cvelist": ["CVE-2010-1608"], "type": "cve", "lastseen": "2017-09-19T13:36:56", "history": [{"bulletin": {"assessment": {"href": "http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ibm:lotus_notes:8.5.1", "cpe:/a:ibm:lotus_notes:8.5", "cpe:/a:ibm:lotus_notes:8.5.1.1"], "cvelist": ["CVE-2010-1608"], "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.", "edition": 2, "enchantments": {}, "hash": "1421e1e4c6f8cfa42c2920b503cc220e7ae21b2f6a5b318d7472f0f397fe59b3", "hashmap": [{"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d564403e1bba0a5ac899edde401f8e1b", "key": "href"}, {"hash": "d91d844db52567275d97a197a16e4eb4", "key": "cpe"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "8865ee6ac7ef60f2ffba60e6f6899abd", "key": "modified"}, {"hash": "ef8a3a347df2de4e7bae4dd826b6dd1e", "key": "scanner"}, {"hash": "3364cd4b725dd2e11c14d1e20358387c", "key": "description"}, {"hash": "d9b38cc1640324bce5e621c1242f3fc1", "key": "cvelist"}, {"hash": "860ae3b318b04cd75010f727318fcdf9", "key": "references"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "1047a03ee9e4c401d3cdb559d8ac5557", "key": "assessment"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9091c9796f3d9f93be4f52a77a151777", "key": "published"}, {"hash": "b4b4bedde6ce458ed2476d47bcae33b6", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1608", "id": "CVE-2010-1608", "lastseen": "2017-08-17T11:14:48", "modified": "2017-08-16T21:32:25", "objectVersion": "1.3", "published": "2010-04-29T13:30:00", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/58322", "https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/", "http://www.securityfocus.com/bid/38300"], "reporter": "NVD", "scanner": [{"href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}], "title": "CVE-2010-1608", "type": "cve", "viewCount": 0}, "differentElements": ["assessment", "modified"], "edition": 2, "lastseen": "2017-08-17T11:14:48"}, {"bulletin": {"assessment": {"href": "http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ibm:lotus_notes:8.5.1", "cpe:/a:ibm:lotus_notes:8.5", "cpe:/a:ibm:lotus_notes:8.5.1.1"], "cvelist": ["CVE-2010-1608"], "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.", "edition": 1, "enchantments": {}, "hash": "1b26010d7535a6388ac718d5e4603f0c453c5561b9de6aa1c8c1288705b8e374", "hashmap": [{"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d564403e1bba0a5ac899edde401f8e1b", "key": "href"}, {"hash": "8c6ef1d1f629ddc16680dcae0cfc8a95", "key": "modified"}, {"hash": "d91d844db52567275d97a197a16e4eb4", "key": "cpe"}, {"hash": "2bdabeb49c44761f9565717ab0e38165", "key": "cvss"}, {"hash": "ef8a3a347df2de4e7bae4dd826b6dd1e", "key": "scanner"}, {"hash": "d511f68d7bf1e3a1cd9099dba97e6d01", "key": "references"}, {"hash": "3364cd4b725dd2e11c14d1e20358387c", "key": "description"}, {"hash": "d9b38cc1640324bce5e621c1242f3fc1", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "1047a03ee9e4c401d3cdb559d8ac5557", "key": "assessment"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "9091c9796f3d9f93be4f52a77a151777", "key": "published"}, {"hash": "b4b4bedde6ce458ed2476d47bcae33b6", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1608", "id": "CVE-2010-1608", "lastseen": "2016-09-03T13:50:26", "modified": "2012-01-26T22:50:34", "objectVersion": "1.2", "published": "2010-04-29T13:30:00", "references": ["https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/", "http://xforce.iss.net/xforce/xfdb/58322", "http://www.securityfocus.com/bid/38300"], "reporter": "NVD", "scanner": [{"href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}], "title": "CVE-2010-1608", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T13:50:26"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "b5bbe05c913fcb7d87eafdde37e92b38"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d91d844db52567275d97a197a16e4eb4"}, {"key": "cvelist", "hash": "d9b38cc1640324bce5e621c1242f3fc1"}, {"key": "cvss", "hash": "2bdabeb49c44761f9565717ab0e38165"}, {"key": "description", "hash": "3364cd4b725dd2e11c14d1e20358387c"}, {"key": "href", "hash": "d564403e1bba0a5ac899edde401f8e1b"}, {"key": "modified", "hash": "6d15b2edba4b71a2ab5aef357b0707ae"}, {"key": "published", "hash": "9091c9796f3d9f93be4f52a77a151777"}, {"key": "references", "hash": "860ae3b318b04cd75010f727318fcdf9"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "ef8a3a347df2de4e7bae4dd826b6dd1e"}, {"key": "title", "hash": "b4b4bedde6ce458ed2476d47bcae33b6"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "05785229a09aba1f0ab6891a64964ebf3075a499084bed675f51b7b9dcaf03e5", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-09-19T13:36:56"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:ibm:lotus_notes:8.5.1", "cpe:/a:ibm:lotus_notes:8.5", "cpe:/a:ibm:lotus_notes:8.5.1.1"], "assessment": {"href": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}, "scanner": [{"href": "http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:14489", "name": "oval:org.mitre.oval:def:14489", "system": "http://oval.mitre.org/XMLSchema/oval-definitions-5"}]}

{"openvas": [{"lastseen": "2017-07-02T21:09:50", "references": ["https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/", "http://secunia.com/advisories/38622"], "pluginID": "801327", "description": "This host has IBM Lotus Notes installed and is prone to buffer\n overflow vulnerability.", "edition": 1, "reporter": "Copyright (c) 2010 Greenbone Networks GmbH", "published": "2010-05-05T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "IBM Lotus Notes Buffer Overflow Vulnerability (Windows)", "type": "openvas", "naslFamily": "Buffer overflow", "bulletinFamily": "scanner", "cvelist": ["CVE-2010-1608"], "modified": "2017-02-16T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=801327", "id": "OPENVAS:801327", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ibm_lotus_notes_bof_vuln_win.nasl 5306 2017-02-16 09:00:16Z teissa $\n#\n# IBM Lotus Notes Buffer Overflow Vulnerability (Windows)\n#\n# Authors:\n# Antu Sanadi <santu@secpod.com>\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_impact = \"Successful exploitation will allow attackers to execute arbitrary\ncode in the context of the user running the application. Failed exploit attempts\nwill result in a denial-of-service condition.\n\nImpact Level: Application\";\n\ntag_affected = \"IBM Lotus Notes Version 8.0 and 8.5 to 8.5 FP1 on Windows.\";\n\ntag_insight = \"The flaw is due to an unspecified error in application, which fails\nto adequately perform boundary checks on user supplied data and can be exploited\nto cause a stack based buffer overflow.\";\n\ntag_solution = \"No solution or patch was made available for at least one year\nsince disclosure of this vulnerability. Likely none will be provided anymore.\nGeneral solution options are to upgrade to a newer release, disable respective\nfeatures, remove the product or replace the product by another one.\";\n\ntag_summary = \"This host has IBM Lotus Notes installed and is prone to buffer\n overflow vulnerability.\";\n\nif(description)\n{\n script_id(801327);\n script_version(\"$Revision: 5306 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-02-16 10:00:16 +0100 (Thu, 16 Feb 2017) $\");\n script_tag(name:\"creation_date\", value:\"2010-05-05 15:59:12 +0200 (Wed, 05 May 2010)\");\n script_cve_id(\"CVE-2010-1608\");\n script_bugtraq_id(38300);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"IBM Lotus Notes Buffer Overflow Vulnerability (Windows)\");\n script_xref(name : \"URL\" , value : \"http://secunia.com/advisories/38622\");\n script_xref(name : \"URL\" , value : \"https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Buffer overflow\");\n script_dependencies(\"secpod_ibm_lotus_notes_detect_win.nasl\");\n script_require_keys(\"IBM/LotusNotes/Win/Ver\");\n script_tag(name : \"impact\" , value : tag_impact);\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"registry\");\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n exit(0);\n}\n\n\ninclude(\"version_func.inc\");\n\n# Get for IBM Lotus Notes Version\nlotusVer = get_kb_item(\"IBM/LotusNotes/Win/Ver\");\nif(lotusVer != NULL)\n{\n # Check for IBM Lotus Notes version 8.0 and 8.5 fp1 <= 8.5.1.9167\n if(version_is_equal(version:lotusVer, test_version:\"8.0\") ||\n version_in_range(version:lotusVer, test_version:\"8.5\", test_version2:\"8.5.1.9167\")){\n security_message(0);\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-24T18:21:22", "references": ["https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/", "http://secunia.com/advisories/38622"], "pluginID": "1361412562310801327", "description": "This host has IBM Lotus Notes installed and is prone to buffer\n overflow vulnerability.", "edition": 4, "reporter": "Copyright (c) 2010 Greenbone Networks GmbH", "published": "2010-05-05T00:00:00", "title": "IBM Lotus Notes Buffer Overflow Vulnerability (Windows)", "type": "openvas", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "naslFamily": "Buffer overflow", "bulletinFamily": "scanner", "cvelist": ["CVE-2010-1608"], "modified": "2018-09-22T00:00:00", "id": "OPENVAS:1361412562310801327", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310801327", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ibm_lotus_notes_bof_vuln_win.nasl 11553 2018-09-22 14:22:01Z cfischer $\n#\n# IBM Lotus Notes Buffer Overflow Vulnerability (Windows)\n#\n# Authors:\n# Antu Sanadi <santu@secpod.com>\n#\n# Copyright:\n# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.801327\");\n script_version(\"$Revision: 11553 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-22 16:22:01 +0200 (Sat, 22 Sep 2018) $\");\n script_tag(name:\"creation_date\", value:\"2010-05-05 15:59:12 +0200 (Wed, 05 May 2010)\");\n script_cve_id(\"CVE-2010-1608\");\n script_bugtraq_id(38300);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"IBM Lotus Notes Buffer Overflow Vulnerability (Windows)\");\n script_xref(name:\"URL\", value:\"http://secunia.com/advisories/38622\");\n script_xref(name:\"URL\", value:\"https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2010 Greenbone Networks GmbH\");\n script_family(\"Buffer overflow\");\n script_dependencies(\"secpod_ibm_lotus_notes_detect_win.nasl\");\n script_mandatory_keys(\"IBM/LotusNotes/Win/Ver\");\n script_tag(name:\"impact\", value:\"Successful exploitation will allow attackers to execute arbitrary\ncode in the context of the user running the application. Failed exploit attempts\nwill result in a denial-of-service condition.\");\n script_tag(name:\"affected\", value:\"IBM Lotus Notes Version 8.0 and 8.5 to 8.5 FP1 on Windows.\");\n script_tag(name:\"insight\", value:\"The flaw is due to an unspecified error in application, which fails\nto adequately perform boundary checks on user supplied data and can be exploited\nto cause a stack based buffer overflow.\");\n script_tag(name:\"solution\", value:\"No known solution was made available for at least one year since the disclosure\n of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer\n release, disable respective features, remove the product or replace the product by another one.\");\n script_tag(name:\"summary\", value:\"This host has IBM Lotus Notes installed and is prone to buffer\n overflow vulnerability.\");\n script_tag(name:\"qod_type\", value:\"registry\");\n script_tag(name:\"solution_type\", value:\"WillNotFix\");\n exit(0);\n}\n\n\ninclude(\"version_func.inc\");\n\nlotusVer = get_kb_item(\"IBM/LotusNotes/Win/Ver\");\nif(lotusVer != NULL)\n{\n if(version_is_equal(version:lotusVer, test_version:\"8.0\") ||\n version_in_range(version:lotusVer, test_version:\"8.5\", test_version2:\"8.5.1.9167\")){\n security_message( port: 0, data: \"The target host was found to be vulnerable\" );\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}