IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)

$Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2011-1520

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

CVE-2011-1519

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the...

Authentication flaw

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the...

Design/Logic Flaw

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

CVE-2011-1520

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

CVE-2011-1520

CVE-2011-1520 affects IBM Lotus Domino where the server console default configuration does not require a password, enabling physically proximate attackers to perform administrative actions or exfiltrate sensitive information via Load, Tell, or Set Configuration commands. The issue is a local acce...

CVE-2011-1519

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the...

CVE-2011-1519

Summary: CVE-2011-1519 affects IBM Lotus Domino Server/Controller (7.x–8.x). The vulnerability enables authentication bypass by placing a UNC share pathname in the COOKIEFILE field, enabling remote attackers to bypass login and potentially execute arbitrary code. Public writeups and exploits (e.g...

IBM Lotus Notes 'cai' URI and iCal Remote Code Execution Vulnerabilities - Windows

IBM Lotus Notes is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes 'cai' URI and iCal Remote Code Execution Vulnerabilities (Windows)

This host has IBM Lotus Notes installed and is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmlotusnotescodeexecvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ IBM Lotus Notes 'cai' URI and iCal Remote Code Execution Vulnerabilities Windows Authors: Antu...

ZDI-11-110: (0day) IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability

ZDI-11-110: 0day IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-110 March 22, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Lotus Domino --...

IBM Lotus Domino Server Controller unauthorized access

User-supplied network file is used for stored user's credentials during TCP/2050 service authentication...

CVE-2011-1505

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and attack vectors, aka SPR ESEO8DQME2...

CVE-2008-7284

IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by clicking a download link, aka SPR QCAO7E6AM8...

CVE-2008-7286

IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service daemon crash via a request to resources.nsf, aka SPR XFXF7JDBCX...

CVE-2009-5059

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...

CVE-2008-7285

Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service daemon crash via unknown vectors, aka SPR JFLD7GZT25...

CVE-2009-5058

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by deleting an item that is accessed through a connector, aka SPR RELS7LARKR...

CVE-2009-5062

IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service daemon crash by subscribing to an Atom feed, aka SPR JRIE7VKMP9...