IBM Lotus Notes HTML Message Handling Buffer Overflow (CVE-2007-4222)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with Lotus Domino server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A stack buffer overflow vulnerability exis...

IBM Lotus Notes WPD Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. There exist a buffer overflow vulnerability in IBM Lotus Notes WPD viewer. The...

IBM Lotus Notes DOC Attachment Viewer Buffer Overflow (CVE-2007-5544)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. A stack buffer overflow vulnerability exists in the way IBM Lotu...

Autonomy KeyView Filter Module Multiple Memory Corruption Vulnerabilities (Lotus Notes)

The version of Lotus Notes installed on the remote Windows host ships with several DLL designed to perform file conversions 'Autonomy KeyView Filter'. Specifically, these DLLs are affected by several overflow vulnerabilities that may allow an attacker to execute arbitrary code on the remote host...

IBM Lotus Notes Lotus 1-2-3 Work Sheet File Viewer Buffer Overflow (CVE-2007-6593)

There is a buffer overflow vulnerability exists in IBM Lotus Notes. The vulnerability is due to a boundary error within the Lotus 1-2-3 file viewer. A remote attacker could leverage this vulnerability by enticing a target user to view the maliciously crafted email attachment. Successful attack...

[SECURITY] Fedora 13 Update: pidgin-2.7.2-1.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

IBM Lotus Notes Applix Graphics Parsing Buffer Overflow (CVE-2007-5405)

IBM Lotus Notes is an integrated collaborative software that consists of features such as an email client, calendering, contact management, and instant messaging. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP,...

IBM Lotus Notes MIF Attachment Viewer Buffer Overflow

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. Multiple buffer overflow vulnerabilities exist in IBM Lotus Note...

CVE-2010-2280

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...

CVE-2010-2278

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

Code injection

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

Design/Logic Flaw

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

Open redirect

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...

CVE-2010-2280

CVE-2010-2280 describes an open redirect vulnerability in the Mobile component of IBM Lotus Connections 2.5.x when not updated to 2.5.0.2 . The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attempts via unspecified vectors, related to the module’s “mo...

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

CVE-2010-2278

The vulnerability CVE-2010-2278 affects IBM Lotus Connections 2.5.x prior to 2.5.0.2, where the bookmarklet pop-up in the Bookmarks component does not properly enforce the force SSL setting. This could allow remote attackers to sniff or MITM network traffic or spoof arbitrary servers. Impact is p...

CVE-2010-2279

The CVE-2010-2279 entry documents a flaw in IBM Lotus Connections 2.5.x before 2.5.0.2 where the Top Updates implementation in the Homepage component uses http links when forced SSL is enabled. The underlying impact and exploitation are described as unspecified in the sources. The Red Hat, NVD, a...