CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service client crash and possibly execute arbitrary code via the NOTES.INI file...

Lotus Notes, Lotus Domino multiple vulnerabilities

Buffer overflows, format string bugs, crossite scripting...

[SA14879] Lotus Notes/Domino Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Lotus Notes/Domino Multiple Vulnerabilities SECUNIA...

CVE-2004-1621

IBM Lotus Notes and IBM Domino (Notes/Domino versions prior to R6) are affected by a cross-site scripting (XSS) vulnerability involving square brackets at the beginning and end of fields computed for display, computed when composed, or computed text element fields. The vendor has disputed that No...

CVE-2004-1621

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...

CVE-2004-2281

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...

CVE-2004-2280

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service crash via unknown vectors related to Java applets, as identified by KSPR62F4KN...

CVE-2004-0480

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...

IBM Lotus Notes/Domino Square Brackets Encoding Failure XSS

The remote server is vulnerable to cross-site scripting, when requesting a .nsf file with html arguments, as in : GET /FormReflectingURLValue?OpenForm&Field=XSS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid15514...

CVE-2004-1621

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...

PT-2004-2528 · Ibm · Ibm Domino +1

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions prior to R6 IBM Domino versions prior to R6 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of computed for...

CVE-2003-0123

CVE-2003-0123 concerns a buffer overflow in Lotus Notes/Domino Web Retriever (R4.5–R6). A remote attacker sending an overly long HTTP status line can crash the Web Retriever, causing a denial of service on the server or client depending on the setup. Public sources from Rapid7 (R7-0011) detail af...

Lotus Notes R5 S/MIME Message Modification Warning Failure

Binary data 1304.prm...

Lotus Notes Mail Client Detection

Binary data 1334.prm...

Lotus Notes Password Hieroglyphics Information Disclosure

Binary data 1305.prm...

IBM Lotus Notes 6.0/6.5 - Multiple Java Applet Vulnerabilities

source: https://www.securityfocus.com/bid/10704/info IBM Lotus Notes is affected by three vulnerabilities concerning Java applets. An attacker can exploit these issues to disclose potentially sensitive information, cause a web browser to open an arbitrary web page, and cause a stack-based buffer...

CVE-2004-0480

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...

CVE-2004-0480

Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...

PT-2004-1599 · Ibm · Ibm Lotus Notes

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions 6.0.3 through 6.5 Description: The issue allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Thi...

[Full-Disclosure] Lotus Notes URL argument injection vulnerability

OVERVIEW ======== Lotus Notes is a groupware/e-mail system developed by Lotus Software. Due to its security and collaboration features it's used particularly by large organizations, government agencies, etc. IBM estimates it is used by 60 million people. During the client-side Windows installatio...