IBM Lotus Notes Sametime User Enumeration

This module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack which is preferred, or a bruteforce attack trying all usernames of MAXDEPTH length or less. Module Options msf use auxiliary/gather/ibm/sametimeenumerateusers msf...

Oracle Java SE CVE-2013-5838 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...

IBM Notes 8.x < 8.5.3 IF4 HF2 / 9.x < 9.0 IF2 Code Execution

The remote host has a version of Lotus Notes 8.x earlier than 8.5.3 Fix Pack 4 Interim Fix 2 or 9.0 earlier than Interim Fix 2. As such, it is potentially affected by a code execution vulnerability. A flaw in the Multi-user Profile Cleanup Service enables an attacker to execute arbitrary code upo...

IBM Notes 8.5 < 8.5.3 IF4 HF2 / 9.0 < 9.0 IF2 Password Disclosure

The remote host has a version of Lotus Notes 8.5.x earlier than 8.5.3 Fix Pack 4 Interim Fix 2 or 9.0 earlier than Interim Fix 2. As such, it is potentially affected by an information disclosure vulnerability. IBM Notes may fail to zero the plaintext password within memory, leaving the plaintext...

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977

IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG image file embedded in an email. Arbitrary code...

IBM Lotus Notes CVE-2013-2977 Integer Overflow Vulnerability

Description IBM Lotus Notes is prone to an integer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of affected applications. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected IBM Lotus Notes 8...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

Code injection

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

CVE-2013-0538

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

CVE-2013-0127

The CVE-2013-0127 entry applies to IBM Notes (Lotus Notes) 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 prior to Interim Fix 1, where HTML emails could contain APPLET elements that are not blocked. The underlying issue allows remote attackers to bypass Java execution restrictions and X-Confirm-Re...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...

IBM Lotus Notes Web Application XSS Vulnerability (Mac OS X)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnmacosx.nasl 6093 2017-05-10 09:03:18Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

IBM Lotus Notes Web Application XSS Vulnerability - Windows

IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Web Application XSS Vulnerability - Linux

IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Detection (Mac OS X SSH Login)

Detects the installed version of IBM Lotus Notes. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

IBM Lotus Notes URL Command Injection RCE Vulnerability (Windows)

This host is installed with IBM Lotus Notes and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnotesurlcmdinjrcevulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes URL Command Injection RCE Vulnerability Windows Authors: Rachana Shetty...

IBM Lotus Notes Web Application XSS Vulnerability (Linux)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnlin.nasl 6125 2017-05-15 09:03:42Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Linux Authors: Rachana Shetty Copyright:...

IBM Lotus Notes Web Application XSS Vulnerability (Windows)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Windows Authors: Rachana Shetty Copyright:...

IBM Lotus Notes URL Command Injection RCE Vulnerability - Windows

IBM Lotus Notes is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...