CVE-2005-2175

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...

CVE-2005-2175

The CVE-2005-2175 entry describes a cross-site scripting vulnerability in IBM Lotus Domino/Notes Web Access (DWA) and Lotus Notes mail: embedded JavaScript in HTML emails is executed automatically when opened, enabling an attacker to read/delete mail, access the user’s contact list, and potential...

CVE-2005-2175: Undefined Security Weakness

The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...

Cross site scripting in Lotus Notes web mail

When an HTML file attachment is opened in a lotus notes account via the web mail interface, the user sees that there is an attachment. Clicking the attachment does not prompt for saving or opening like in Yahoo, but opens the malicious HTML immediately, allowing for stealing of the LTPA session...

Lotus Notes mail server crossite scripting

HTML attachment content is not filtered in Web interface...

Lotus Notes < 6.5.5 Web Mail Attachment HTML Injection

Binary data 3052.prm...

CVE-2001-1504

The CVE-2001-1504 entry relates to Lotus Notes R5 Client 4.6, where a Lotus Notes object containing code in an event can be automatically executed when the user processes an e-mail message, enabling remote command execution. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with network at...

CVE-2001-1504

Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message...

CVE-2001-1504: Undefined Security Weakness

Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message...

CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service client crash and possibly execute arbitrary code via the NOTES.INI file...

CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 (before 6.5.4) and 6.0 (before 6.0.5) allows local users to crash the client and potentially execute arbitrary code via the NOTES.INI file. Affected component: NOTES.INI handling in Lotus Notes client. Impact: local denial of service, with ...

CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service client crash and possibly execute arbitrary code via the NOTES.INI file...

CVE-2005-1442: Undefined Security Weakness

Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service client crash and possibly execute arbitrary code via the NOTES.INI file...

Lotus Notes, Lotus Domino multiple vulnerabilities

Buffer overflows, format string bugs, crossite scripting...

[SA14879] Lotus Notes/Domino Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Lotus Notes/Domino Multiple Vulnerabilities SECUNIA...

CVE-2004-1621

IBM Lotus Notes and IBM Domino (Notes/Domino versions prior to R6) are affected by a cross-site scripting (XSS) vulnerability involving square brackets at the beginning and end of fields computed for display, computed when composed, or computed text element fields. The vendor has disputed that No...

CVE-2004-1621

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...

CVE-2004-1621: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...

CVE-2004-2281

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...

CVE-2004-2280

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service crash via unknown vectors related to Java applets, as identified by KSPR62F4KN...