IBM Lotus Notes Client URL Handler Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "IBM Lotus Notes...

IBM Lotus Notes URL Handler Command Execution (CVE-2012-2174)

A command execution vulnerability has been reported in IBM Lotus Notes...

IBM Lotus Notes URL Handler Command Execution

Added: 09/07/2012 CVE: CVE-2012-2174 BID: 54070 OSVDB: 83063 Background Lotus Notes is the client for Lotus Domino servers. Problem Lotus Notes 8.5.3 and earlier is vulnerable to remote code execution when handling a specially crafted URL. A remote attacker can pass the -RPARAMS command line...

ZDI-12-154 : IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-154 : IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-154 August 22, 2012 - -- CVE ID: CVE-2012-2174 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

CentOS Update for wireshark CESA-2012:0509 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for wireshark RHSA-2012:0509-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for wireshark RHSA-2012:0509-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2012:0509-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

IBM Lotus Notes 8.x "notes" URI处理器漏洞

CVE ID: CVE-2012-2174 IBM Lotus Notes是桌面客户端，为用户提供了单点访问功能，有助于他们创建、查询和共享知识，与团队协作，以及采取相应措施。 IBM Lotus Notes 8.0.2、8.5、8.5.1、8.5.2、8.5.3在"notes" URI处理程序中存在错误，可被利用执行任意命令。 0 IBM Lotus Notes 8.x 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（1598348）以及相应补丁: 1598348：Security Bulletin: IBM Lotus Notes URL Command Injecti...

CVE-2012-2174

The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL...

DSquare Exploit Pack: D2SEC_NOTESURL

Name| d2secnotesurl ---|--- CVE| CVE-2012-2174 Exploit Pack| D2ExploitPack Description| IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability Notes|...

CVE-2012-2174

CVE-2012-2174 affects IBM Lotus Notes 8.x, where the URL handler for notes:// URLs is vulnerable to remote code execution. The vulnerability exists in the Lotus Notes URL handler prior to 8.5.3 FP2, allowing an attacker to execute arbitrary commands by convincing a user to open a crafted notes://...

IBM Lotus Notes Client URL Handler Command Injection

This module exploits a command injection vulnerability in the URL handler for for the IBM Lotus Notes Client use exploit/windows/browser/notes/handlercmdinject msf undefinedhandlercmdinject show actions ...actions... msf undefinedhandlercmdinject set ACTION msf undefinedhandlercmdinject show...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7795)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

Fedora Update for wireshark FEDORA-2011-7846

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : wireshark-1.4.7-1.fc15 (2011-7821)

Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.4.7.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

CVE-2011-2174

Double free vulnerability in the tvbuncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service application crash via a packet with malformed data that uses zlib compression...

CVE-2011-2174

Wireshark contains a Double free vulnerability in tvb_uncompress (epan/tvbuff.c) leading to remote denial of service. Affected: Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7. Mitigation: upgrade to fixed versions (1.2.17+ or 1.4.7+). This CVE is listed in MIRACLE/LINUX AXSA-2012-539 and ap...

Mandriva Update for wireshark MDVSA-2011:105 (wireshark)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian: Security Advisory (DSA-2174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2174-1 : avahi - denial of service

It was discovered that Avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...