CVE-2010-2277

CVE-2010-2277 affects IBM Lotus Connections 2.5.x before 2.5.0.2. The vulnerability involves multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) the create or (2) edit form in the Communities component, (3) the verbiage field in the...

CVE-2010-2278

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

CVE-2010-2280

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...

IBM Lotus Domino LDAP Server Invalid DN Message Buffer Overflow (CVE-2007-1739)

IBM Lotus Domino Server is a collaboration software that provides mail, messaging, calendaring and scheduling capabilities across multiple platforms. The product implements numerous services based on open standards, including LDAP, SMTP, IMAP, and POP3. There exist a buffer overflow vulnerability...

[SECURITY] Fedora 13 Update: pidgin-2.7.0-2.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 11 Update: pidgin-2.7.0-2.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

IBM Lotus Domino Sametime - 'STMux.exe' Remote Stack Buffer Overflow (Metasploit)

$Id: dominosametimestmux.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IBM Lotus Domino LDAP Heap Buffer Overflow (CVE-2010-0358)

IBM Lotus Domino Server is a software that provides mail, messaging, calendaring for multiple platforms. A heap buffer overflow vulnerability exists in IBM Lotus Domino server. The vulnerability is due an integer overflow that can occur when processing LDAP messages. A Remote attacker can exploit...

Lotus Domino Brute Force Utility

Lotus Domino Authentication Brute Force Utility This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lotus Domino Brute Force Utility', 'Description' = 'Lotus Domino Authentication Brute Force...

Lotus Domino Version

Several checks to determine Lotus Domino Server Version. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lotus Domino Version', 'Description' = 'Several checks to determine Lotus Domino Server...

IBM Lotus Notes Buffer Overflow Vulnerability (Windows)

This host has IBM Lotus Notes installed and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnotesbofvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM Lotus Notes Buffer Overflow Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

IBM Lotus Notes Buffer Overflow Vulnerability - Windows

IBM Lotus Notes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vdln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information...

CVE-2010-1608

Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vdln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information...

CVE-2010-1608

Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vdln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information...

CVE-2010-1608

CVE-2010-1608 concerns a stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1 (and possibly other versions) that allows remote code execution via unknown attack vectors; the vulnerability is evidenced by the vd_ln module in VulnDisco 9.0. The NVD listing assigns a base score of 10.0 (NET...

IBM Lotus Notes WPD Attachment Handling Buffer Overflow (CVE-2008-4564)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP, and IMAP protocols. A stack-based buffer overflow vulnerability exists in the IBM Lotus Notes WPD. Th...

Update Protection against IBM Lotus Domino Web Access ActiveX Controls Buffer Overflow

A vulnerability has been reported in IBM Lotus Domino, a Web browser-based client platform that provides functionality similar to that of IBM Lotus Notes. The vulnerability is due to a boundary error while handling malformed data passed to the iNotes Web Access ActiveX controls. A remote attacker...

Lotus Domino Web Administrator - Cross Site Command Execution

Application: Lotus Domino Versions Affected: Lotus Domino Web Administrator 6.5 and 8.5.1 Vendor URL: IBM Bugs: CSRF, Command execution Exploits: YES Reported: 22.04.2010 Vendor response: 22.04.2010 Date of Public Advisory: 24.03.2013 Reference: IBM CVE number: CVE-2013-0489 Author: Alexander...