Lotus Notes Client R5 File Existence Verification Vulnerability

Description Lotus Notes Client R5 is a messaging and collaboration tool that contains a built in web browser. The web browser implements a Java Virtual Machine VM designed specifically for Lotus Notes. A security vulnerability exists in the Execution Control List ECL feature within the Java VM th...

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

CVE-1999-0429

The CVE-1999-0429 issue affects the Lotus Notes 4.5 client. The vulnerability arises when the user does not enable the Encrypt Saved Mail setting, allowing a copy of encrypted mail to be sent in the clear over the network. The NVD metrics indicate partial confidentiality and integrity/availabilit...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

Notes default ECL allows execution of unsigned code

Overview Lotus Notes prior to version 5.02, had permissive ECLs that allow for the execution of malicious mail messages. Description A Notes ECL is a list consisting of a Notes Username and a set of permissions from the following list for Notes 4.6.x: Access to file system Access to current...

Уязвимость в Lotus Notes

Алгоритм хэширования паролей пользователя очень слабый - один и тот же пароль всегда дает одинаковый результат, при этом хэши паролей хранятся в файле открытом на чтение, что позволяет атаки по словарю или грубой силы...

Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

lotus-notes-smtp-DoS.txt

Date: Fri, 15 Jan 1999 00:52:53 PST From: Siva Sankar Adiraju To: [email protected] Subject: Lotus Notes SMTP Server bug There is a security bug in IBM's Lotus Notes SMTP server. eg. An SMTP session: helo a 250 notes.foo.com helo b 500 Session already established. The domain name b passed in...

lotus.notes.mail.crypto.txt

Date: Tue, 23 Mar 1999 18:57:23 +0100 From: Martin Bartosch To: [email protected] Security advisory Advisory released Mar 23 1999 ----- Application: Lotus Notes Client Version 4.5, probably others Impact: Encrypted mail sent from the Notes client may traverse the network in the clear and may b...

lotus.notes.relay.txt

Date: Mon, 14 Jun 1999 17:40:35 +0100 From: Robert Lister To: [email protected] Subject: Lotus Notes Relay Following postings about NTMail having open relaying ability, in certain situations I have identified a problem with the Lotus SMTP MTA right up to v4.6.4, have yet to test...

lotus.notes.time.txt

Lotus Notes Locations & DST Thomas Zehetbauer [email protected] Thu, 8 Apr 1999 12:25:08 +0200 --HlL+5n6rz5pIUxbD Content-Type: text/plain; charset=us-ascii Lotus Notes may under some circumstances silently change the System time. This happend here with "Location"="Office Network", "Local ti...

domino-notes.txt

''''''''''''''''''''''''''''''''''''' L0pht Security Advisory URL Origin: http://www.l0pht.com/advisories.html Release Date: July 31, 1998 Application: Notes 4.6+ Client Operating Sys: Any Severity: Users can overwrite/create system files Author: nny Patch Status: Lotus has been made aware of thi...

lotus.notes.crypto.txt

Date: Fri, 26 Mar 1999 21:25:10 GMT From: KevinLynch/CAM/[email protected] To: [email protected] Subject: Re: Lotus Notes security advisory Security Advisory Application: Lotus Notes Client R4.5 and Later Summary: As reported March 23, 1999 by Martin Bartosch of Deutsche Bank AG, there is a bug ...

Lotus Domino 4.6.1/4.6.4 Notes - SMTPA MTA Mail Relay

source: https://www.securityfocus.com/bid/487/info Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data may allow an unauthorized user to relay email via this...

Lotus Domino 4.6.14.6.4 Notes - SMTPA MTA Mail Relay

Lotus Domino 4.6.14.6.4 Notes - SMTPA MTA Mail Relay source: https://www.securityfocus.com/bid/487/info Lotus Notes SMTP MTA is susceptible to being used as a mail relay for SPAM or other unsolicited email. Connecting to the mail server tcp25 and issuing a 'mail from' command with as the data may...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...