676 matches found
Security BugWare Advisory
----www.securitybugware.org---- A D V I S O R I E S Dear World, From 1996 to 9th Sep 2001, Hrvoje Crvelin maintained the most explicit website about bugs, exploits, and solutions. He decided to stop this project. As there is no such resource on the web, we decided to keep this one alive. Behind t...
Управляющие элементы в письмах Lotus Notes (code execution)
Письма Lotus Notes могут содержать исполняемые процедуры VBS, которые будут выполнены незаметно для пользователя...
Доступ к прикрепленным файлам в Lotus Notes (unauthorized access)
Не имея доступа к документу непривилегированный пользователь может тем не менее получить доступ к прикрепленному файлу...
Lotus Notes: File attachments may be extracted regardless of document security
Hello, This is my first post to the list. I'll try to get this right. The short version is that file attachments and other objects may be extracted from Notes databases regardless of any author or reader fields on the documents the objects are attached to. This goes back to the structure of Notes...
CVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email...
Lotus Notes Java VM leaks file existence through timing difference in ECLs
Overview Lotus Notes JVM leaks information about the existence of a file. Description A malicious Java applet run in the Lotus Notes web browser can determine if a local file exists. Notes' preferences must be set to browse the web using the Notes browser, with execution of Java applets...
CVE-1999-0729
CVE-1999-0729 corresponds to a buffer overflow in Lotus Notes LDAP (NLDAP) that enables a denial-of-service through the ldap_search request. The linked Red Hat advisory and CVE records confirm the root cause as a buffer overflow and the impact as a DoS, but no specific affected versions, vulnerab...
CVE-1999-0729
Buffer overflow in Lotus Notes LDAP NLDAP allows an attacker to conduct a denial of service through the ldapsearch request...
CVE-1999-0729
Buffer overflow in Lotus Notes LDAP NLDAP allows an attacker to conduct a denial of service through the ldapsearch request...
Lotus Notes Stored Form Vulnerability
Security Advisory: Lotus Notes Stored Form Vulnerability Date: 8th February 2001 Author: Chris Jones aka dp [email protected] Versions Affected: At present only Lotus Notes v4.6 has been tested ---- Exploit Introduction ------------------------------------------ Due to the design flaws of Lotus Not...
Дырка в Lotus Notes (stored foms)
Внутрь письма можно вставить исполняемый код во внутреннем формате...
CVE-2000-1138
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...
CVE-2000-1117
The Extended Control List ECL feature of the Java Virtual Machine JVM in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method...
PT-2001-1156 · Ibm · Lotus Notes Client
Name of the Vulnerable Software and Affected Versions: Lotus Notes Client R5 Description: The issue concerns the Extended Control List ECL feature of the Java Virtual Machine JVM in the affected software. It allows malicious web site operators to determine the existence of files on the client by...
CVE-2000-1138
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...
CVE-2000-1138
CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...
CVE-2000-1117
The Extended Control List ECL feature of the Java Virtual Machine JVM in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method...
CVE-2000-1117
CVE-2000-1117 affects the Lotus Notes Client R5. The JVM’s Extended Control List (ECL) feature enables a timing side channel via getSystemResource to infer whether a local file exists, by comparing dialog timing when a Java applet accesses local files. An attacker using a malicious applet in the ...
Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5
========================================================================= Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5 http://java-house.etl.go.jp/ml/archive/j-h-b/038904.html ========================================================================= The security hole...