CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

Design/Logic Flaw

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

CVE-2010-1487

CVE-2010-1487 affects IBM Lotus Notes 7.0, 8.0, and 8.5 where administrative credentials are stored in cleartext in SURunAs.exe (SPR JSTN837SEG). The underlying issue is that sensitive credentials are kept in cleartext within a local-execution context, enabling local users to obtain them by exami...

IBM Lotus Notes SURunAs.exe明文存储口令漏洞

BUGTRAQ ID: 39525 Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 Lotus Notes的SURunAs工具存储了在PC上安装Notes的Windows账号口令，本地用户可以使用第三方工具查看surunas中以明文形式存储的口令。 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0 IBM Lotus Notes 7.0 厂商补丁： IBM --- 厂商建议完成安装后更改管理口令即可修复这个漏洞。...

IBM Lotus Domino Web Access ActiveX Controls Buffer Overflow (CVE-2007-4474)

IBM Lotus Domino Web Access is a Web browser-based client platform that provides functionality similar to that of IBM Lotus Notes. With Lotus Domino Web Access, the user can send encrypted rich text e-mails, schedule meetings, manage tasks, collaborate with colleagues and so on. There exists a...

IBM Lotus Notes names.nsf开放重新定向漏洞

BUGTRAQ ID: 38852 Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 远程攻击者可以通过向Lotus Notes的names.nsf页面提交恶意HTTP POST请求执行HTTP响应拆分漏洞，将用户重新定向到其他位置。 IBM Lotus Notes 6.x 厂商补丁： IBM --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.ers.ibm.com/ POST /names.nsf?Login...

IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboratio...

IBM Lotus Domino response splitting

Response splitting via POST request to /names.nsf, crossite scripting...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

IBM Lotus 6.x HTTP Response Splitting Vulnerability

No description provided by source. ========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software...

IBM Lotus 6.x HTTP Response Splitting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboration...

IBM Lotus 6.x HTTP Response Splitting

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x HTTP Response Splitting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboration...

IBM Lotus 6.x HTTP Response Splitting Vulnerability

Exploit for unknown platform in category web applications =================================================== IBM Lotus 6.x HTTP Response Splitting Vulnerability =================================================== ===================== I. BACKGROUND ===================== IBM Lotus Software delive...

IBM Lotus Notes 6.5.6 - names.nsf Open Redirection

IBM Lotus Notes 6.5.6 - names.nsf Open Redirection source: https://www.securityfocus.com/bid/38852/info IBM Lotus Notes is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

IBM Lotus Notes 6.5.x - names.nsf Cross-Site Scripting

IBM Lotus Notes 6.5.x - names.nsf Cross-Site Scripting source: https://www.securityfocus.com/bid/38880/info IBM Lotus Notes is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

IBM Lotus Notes 6.5.6 - 'names.nsf' Open Redirection

source: https://www.securityfocus.com/bid/38852/info IBM Lotus Notes is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Lotus Notes 6.x is vulnerable;...

IBM Lotus Notes 6.5.x - 'names.nsf' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38880/info IBM Lotus Notes is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Multiple IBM Products Login Page Cross Site Scripting Vulnerability

Multiple IBM products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Multiple IBM Products Login Page XSS Vulnerability

Multiple IBM products are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...