IBM Lotus Notes远程栈溢出漏洞

BUGTRAQ ID: 38300 Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 远程攻击者可以通过向Lotus Notes服务器提交恶意请求触发栈溢出，导致执行任意代码。 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0 厂商补丁： IBM --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.ers.ibm.com/...

CVE-2009-3032

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE...

Integer overflow

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE...

CVE-2009-3032

Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE...

CVE-2009-3032

CVE-2009-3032 describes a heap-based buffer overflow in Autonomy KeyView Filter SDK (kvolefio.dll v8.5.0.8339 and v10.5.0.0) triggered by processing crafted OLE documents, impacting products that embed KeyView (e.g., IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.x). The v...

IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

CVE-2009-0306

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

CVE-2009-0306

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

IBM Lotus Notes Cross Site Scripting (CVE-2005-2175)

IBM Lotus Domino/Notes is a software suite that provides enterprise-class messaging, calendaring, and scheduling capabilities for collaborative applications. There exists a security flaw in IBM Lotus Domino Web Access DWA and Lotus Notes. Embedded JavaScript in HTML formatted Emails will...

IBM Lotus Notes Version Detection (Windows)

This script detects the installed version of IBM Lotus Notes and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ IBM Lotus Notes Version Detection Windows Authors: Antu Sanadi Updated By: Antu Sanadi on 2010-05-04 Updated to...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Linux)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Linux Authors: Antu Sanadi Copyright:...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Windows)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Windows Authors: Antu Sanadi Copyright:...

IBM Lotus Notes Version Detection (Linux)

This script detects the installed version of IBM Lotus Notes and sets the result in KB item. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ IBM Lotus Notes Version Detection Linux Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Linux

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Detection (Linux/Unix SSH Login)

This script detects the installed version of IBM Lotus Notes item. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Detection (Windows SMB Login)

This script detects the installed version of IBM Lotus Notes. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Windows

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (CVE-2009-3114) affects Lotus Notes 8.0/8.5 RSS reader widget. The flaw causes local HTML documents to be saved from RSS items, enabling remote attackers to execute arbitrary script in Internet Explorer’s Local Machine Zone via a craf...