Lucene search

[email protected]CVE-2013-0536

HistoryJun 21, 2013 - 5:55 p.m.

CVE-2013-0536

2013-06-2117:55:00

CWE-264

[email protected]

web.nvd.nist.gov

ntmulti.exe

ibm notes

cve-2013-0536

security vulnerability

privilege escalation

code execution

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24.

CPENameOperatorVersion
ibm:lotus_inotesibm lotus inoteseq8.5.2.0
ibm:lotus_notesibm lotus noteseq8.5
ibm:lotus_notesibm lotus noteseq8.5.1
ibm:lotus_notesibm lotus noteseq8.0.1
ibm:lotus_inotesibm lotus inoteseq8.5.3.0
ibm:lotus_notesibm lotus noteseq8.0.2
ibm:lotus_notes_traveleribm lotus notes travelereq9.0
ibm:lotus_notesibm lotus noteseq8.0

CPE	Name	Operator	Version
ibm:lotus_inotes	ibm lotus inotes	eq	8.5.2.0
ibm:lotus_notes	ibm lotus notes	eq	8.5
ibm:lotus_notes	ibm lotus notes	eq	8.5.1
ibm:lotus_notes	ibm lotus notes	eq	8.0.1
ibm:lotus_inotes	ibm lotus inotes	eq	8.5.3.0
ibm:lotus_notes	ibm lotus notes	eq	8.0.2
ibm:lotus_notes_traveler	ibm lotus notes traveler	eq	9.0
ibm:lotus_notes	ibm lotus notes	eq	8.0

References

www-01.ibm.com/support/docview.wss?uid=swg21633827

exchange.xforce.ibmcloud.com/vulnerabilities/82658

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2013-0536

nessus1 cvelist1 prion1