CVE-2010-4552

The CVE pertains to IBM Lotus Notes Traveler before 8.5.1.1, where a memory leak in processing emails with embedded objects for iPhone clients can lead to denial of service via memory consumption and daemon outage. Affected component: Lotus Notes Traveler; root cause: memory leak. Exploitation de...

CVE-2010-4547

IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users from a different Domino domain than the Traveler server, which allows remote authenticated users to bypass intended access restrictions by using credentials fr...

CVE-2010-4553

CVE-2010-4553 : An unspecified Domino API in IBM Lotus Notes Traveler prior to 8.5.1.1 does not properly handle MIME types, enabling a remote attacker to cause a denial of service (daemon crash) via unspecified vectors. The vulnerability affects IBM Lotus Notes Traveler before version 8.5.1.1; no...

CVE-2010-4544

Cross-site scripting XSS vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4546

CVE-2010-4546 affects IBM Lotus Notes Traveler prior to 8.5.1.2. The issue arises when handling an attachment download request for an e-mail message with a Prevent Copy attribute, where the system does not reject the request. This allows remote authenticated users to bypass intended access restri...

CVE-2010-4550

CVE-2010-4550: IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document. This is corroborated across multiple connected records (NVD, Red Hat, CVE lists, PRION) with the same impact description. No exploitation details, v...

CVE-2009-5034

IBM Lotus Notes Traveler before 8.5.0.2 is affected by a DoS vulnerability: remote authenticated users can trigger memory consumption and daemon crash by syncing a large volume of data, due to launching a new process to handle the data while the previous process is still operating. The available ...

CVE-2010-4548

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service daemon crash by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client...

CVE-2010-4549

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation...

CVE-2009-5032

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2010-4547

CVE-2010-4547 affects IBM Lotus Notes Traveler before 8.5.1.3. In a multidomain environment, the server fails to properly apply policy documents to mobile users from a different Domino domain, allowing remote authenticated users to bypass access restrictions by using credentials from another doma...

CVE-2009-5035

Technical details about CVE-2009-5035 are not publicly provided in the supplied documents. The available records only reiterate the vulnerability description; monitor for updates for affected products and fixes.

CVE-2010-4544

CVE-2010-4544 affects IBM Lotus Notes Traveler (servlet) prior to version 8.5.1.3. The issue is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available documents confirm the affected product and the underly...

CVE-2009-5034

IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service memory consumption and daemon crash by syncing a large volume of data, related to the launch of a new process to handle the data while the previous process is still operating on the data...

CVE-2010-4552

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service memory consumption and daemon outage by sending many embedded objects in e-mail messages for iPhone clients...

CVE-2010-4546

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

CVE-2009-5033

IBM Lotus Notes Traveler before 8.5.0.2 is affected by an input handling flaw in a tell command that accepts a "* *" argument sequence. This allows remote authenticated users to access other users’ data via a sync operation, due to how data for multiple users is stored within the same thread. The...

CVE-2010-4545

IBM Lotus Notes Traveler before 8.5.1.2 is affected. A remote authenticated user can cause a denial of service (resource consumption and sync outage) by syncing a large volume of data. The CVSSv2 base score is 4.0 (Medium); attack vector Network, authentication Single, impact: Availability Partia...

CVE-2010-4550

IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service sync failure via a malformed document...

CVE-2010-4551

IBM Lotus Notes Traveler prior to 8.5.1.2 is affected: vulnerability arises when the Internet ID field in a person document is omitted, enabling remote authenticated users to trigger a NULL pointer dereference that crashes the Traveler daemon via Apple-device invitation acceptance/decline. Affect...