Design/Logic Flaw

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0120

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0119

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

Information disclosure

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0121

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0117

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

CVE-2006-0117

The vulnerability CVE-2006-0117 affects IBM Lotus Notes and Domino Server prior to version 6.5.5, where a buffer overflow in the CD to MIME Conversion path can cause a denial of service (router crash or hang). The description in the connected documents confirms the affected product and the underl...

CVE-2006-0120

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...

CVE-2006-0121

CVE-2006-0121 affects IBM Lotus Notes and Domino Server prior to 6.5.5. The issue consists of multiple memory leaks that can cause a denial of service (memory consumption and crash) via unknown vectors related to (1) SSL handshake vectors and (2) the stash file during the SSL handshake (SPR# MKIN...

CVE-2006-0119

IBM Lotus Domino SMTP server is vulnerable to a denial-of-service via malformed vCal meeting requests. The routing service (nrouter.exe) can be driven to consume 100% CPU, potentially blocking mail delivery. The issue is unauthenticated and can be triggered remotely, with the vulnerability descri...

CVE-2006-0117

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...

CVE-2006-0119

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2006-0118

Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service deep recursion leading to stack overflow and crash via long formulas...

CVE-2006-0120

CVE-2006-0120 affects IBM Lotus Notes and Domino Server prior to 6.5.5. Six distinct vectors can cause a denial of service (application crash): 1) malformed Out Of Office message, 2) the compact command, 3) malformed bitmap images, 4) Delete Attachment action, 5) parsing certificates from a remot...

CVE-2006-0118

Affected software: IBM Lotus Notes and Domino Server before 6.5.5 running on AIX. Vulnerability details: denial of service via long formulas causing deep recursion leading to a stack overflow and crash. Impact: availability impact (partial) as per CVSS. Exploitability: network attack vector, low ...

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

CVE-2005-2619

Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

Lotus Notes WMF File Handling Code Execution Vulnerability

Information about new vulnerability affecting to Lotus Notes has been released recently at http://www.nist.org/nistplugins/content/content.php?content.25 This issue is due to Shimgvw.dll graphics rendering engine being used when rendering picture files sent as a file attachment. Reportedly person...

Lotus Notes Information Disclosure Vulnerability

A default behavior of Lotus Notes allows remote users to enumerate existing databases on a remote Domino Lotus Notes server. This information is considered sensitive, since it might reveal versions, logs, statistics, etc. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be...