Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows

====================================================================== Secunia Research 10/02/2006 - Lotus Notes HTML Speed Reader Link Buffer Overflows - ====================================================================== Table of Contents Affected...

[SA16280] IBM Lotus Notes Multiple Vulnerabilities

TITLE: IBM Lotus Notes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16280 VERIFY ADVISORY: http://secunia.com/advisories/16280/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: IBM Lotus Notes 6.x http://secunia.com/product/388/ IBM Lotus Notes 7.x...

Design/Logic Flaw

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

Information disclosure

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

Buffer overflow

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

Design/Logic Flaw

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2006-0117

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

CVE-2006-0119

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2006-0120

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0121

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0120

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0119

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2006-0120: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0117: Undefined Security Weakness

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

CVE-2006-0118: Undefined Security Weakness

Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service deep recursion leading to stack overflow and crash via long formulas...

CVE-2006-0121: Undefined Security Weakness

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0119: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...