CVE-2006-0119: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers 1 GPKS6C9J67 in Agents, 2 JGAN6B6TZ3 and 3 KSPR699NBP in the Router, 4 GPKS5YQGPT in Security, or 5...

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

CVE-2005-2619

Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

Lotus Notes WMF File Handling Code Execution Vulnerability

Information about new vulnerability affecting to Lotus Notes has been released recently at http://www.nist.org/nistplugins/content/content.php?content.25 This issue is due to Shimgvw.dll graphics rendering engine being used when rendering picture files sent as a file attachment. Reportedly person...

Lotus Notes Information Disclosure Vulnerability

A default behavior of Lotus Notes allows remote users to enumerate existing databases on a remote Domino Lotus Notes server. This information is considered sensitive, since it might reveal versions, logs, statistics, etc. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

POP3 Server type and version

This detects the POP3 Server SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10185";...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

CVE-2005-2696

CVE-2005-2696 concerns IBM Lotus Notes/NAB where password hashes could be accessed remotely due to improper restriction of access to password hash data. The description specifies three leakage vectors: (1) password digest in the Administration tab of a Notes client, (2) PasswordDigest and HTTPPas...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

CVE-2005-2696: Undefined Security Weakness

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

IBM Lotus Notes multiple disclosures of password hashes

Summary ======== A vulnerability describing password hashes disclosure in Domino webmail was published in July 2005.A further test revealed disclosed password hashes in the Lotus Notes client and in Domino LDAP. Details ======= Lotus Notes client can be used to access the Notes Address Book NAB...

CVE-2004-2281

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...

CVE-2004-2281

Technical details about CVE-2004-2281 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2004-2280

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service crash via unknown vectors related to Java applets, as identified by KSPR62F4KN...

CVE-2004-2280

CVE-2004-2280 affects IBM Lotus Notes 6.5.x (before 6.5.3) and 6.0.x (before 6.0.5). It is a buffer overflow vulnerability that could allow remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets (identified by KSPR62F4KN). The connected documents provide...

CVE-2004-2280: Undefined Security Weakness

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service crash via unknown vectors related to Java applets, as identified by KSPR62F4KN...

CVE-2004-2281: Undefined Security Weakness

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...

CVE-2005-2175

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...