KLA10201 ACE vulnerability in IBM

2014-04-2300:00:00

Kaspersky Lab

threats.kaspersky.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.5

Confidence

Low

EPSS

0.014

Percentile

86.3%

JSON

An unspecified vulnerability was found in IBM products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to gcc keys.

Original advisories

Related products

IBM-Notes

IBM-Domino

CVE list

CVE-2014-0892 critical

Solution

Update to latest version

Impacts

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

IBM Lotus Notes 8.5 versions 8.5.3.6 IF2 and earlier for Linux x32IBM Lotus Notes 9 versions 9.0.1 FP1 and earlier for Linux x32IBM Lotus Domino 8.5 versions 8.5.3.6 IF2 and earlier for Linux x32IBM Lotus Domino 9 versions 9.0.1 FP1 and earlier for Linux x32