CVE-2009-5032

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2010-4552

The CVE pertains to IBM Lotus Notes Traveler before 8.5.1.1, where a memory leak in processing emails with embedded objects for iPhone clients can lead to denial of service via memory consumption and daemon outage. Affected component: Lotus Notes Traveler; root cause: memory leak. Exploitation de...

CVE-2009-5033

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a " " argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread...

CVE-2010-4553

An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2010-4550: Improper Input Validation

IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service sync failure via a malformed document...

PT-2010-5529

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain, due to improper application of policy documents to...

PT-2010-5535

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.1 Description The issue is related to an unspecified Domino API in IBM Lotus Notes Traveler that does not properly handle MIME types. This can be exploited by remote attackers to cause a denial ...

PT-2010-5527

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in resource consumption and sync outage, by syncing a large volume of data. Recommendations For...

PT-2010-1825

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in memory consumption and daemon crash, by syncing a large volume of data. This is related to th...

CVE-2010-4548: Improper Input Validation

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service daemon crash by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client...

CVE-2010-4546: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

PT-2010-5531

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by performing a Replace Data operation for a prohibited application on the Noki...

PT-2010-5526

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For version...

CVE-2010-4553: Improper Input Validation

An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

PT-2010-5532

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote attackers to cause a denial of service, specifically a sync failure, by sending a malformed document. Recommendations For versions prior to 8.5.1.3, update ...

PT-2010-5528

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by not rejecting an attachment download request for an e-mail message with a...

PT-2010-5530

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by accepting a meeting invitation with an iNotes client...

CVE-2010-4551: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

CVE-2010-4545: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

CVE-2009-5036: Undefined Security Weakness

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service daemon crash via a malformed invitation document in a sync operation...