CVE-2010-4552

The CVE pertains to IBM Lotus Notes Traveler before 8.5.1.1, where a memory leak in processing emails with embedded objects for iPhone clients can lead to denial of service via memory consumption and daemon outage. Affected component: Lotus Notes Traveler; root cause: memory leak. Exploitation de...

CVE-2010-4553

CVE-2010-4553 : An unspecified Domino API in IBM Lotus Notes Traveler prior to 8.5.1.1 does not properly handle MIME types, enabling a remote attacker to cause a denial of service (daemon crash) via unspecified vectors. The vulnerability affects IBM Lotus Notes Traveler before version 8.5.1.1; no...

PT-2010-1823

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The encrypted e-mail feature in IBM Lotus Notes Traveler has an issue where it sends unencrypted messages when used without uploading a Notes ID file. This makes it easier for remo...

PT-2010-1824

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The issue arises from improper handling of a " " argument sequence for a certain tell command, allowing remote authenticated users to obtain access to other users' data via a sync...

PT-2010-1826

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The issue arises from the Nokia client in IBM Lotus Notes Traveler not properly handling multiple outgoing e-mail messages between sync operations. This could potentially allow...

PT-2010-1827

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.0.1.3 CF1 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by sending a malformed invitation document during a...

PT-2010-5526

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For version...

PT-2010-5527

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in resource consumption and sync outage, by syncing a large volume of data. Recommendations For...

PT-2010-5528

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by not rejecting an attachment download request for an e-mail message with a...

PT-2010-5529

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain, due to improper application of policy documents to...

PT-2010-5530

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by accepting a meeting invitation with an iNotes client...

PT-2010-5531

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by performing a Replace Data operation for a prohibited application on the Noki...

PT-2010-5532

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote attackers to cause a denial of service, specifically a sync failure, by sending a malformed document. Recommendations For versions prior to 8.5.1.3, update ...

PT-2010-5533

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by exploiting a NULL pointer dereference. This can be achieved by omitting th...

PT-2010-5535

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.1 Description The issue is related to an unspecified Domino API in IBM Lotus Notes Traveler that does not properly handle MIME types. This can be exploited by remote attackers to cause a denial ...

PT-2010-5534

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and daemon outage, by sending many embedded objects in e-mail messages for iPhone...

CVE-2010-4544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5036: Undefined Security Weakness

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service daemon crash via a malformed invitation document in a sync operation...

CVE-2009-5032: Undefined Security Weakness

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-5033: Exposure of Sensitive Information to an Unauthorized Actor

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a " " argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread...