Code injection

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service daemon crash via requests for URLs that reference certain files...

CVE-2007-0067

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service daemon crash via requests for URLs that reference certain files...

CVE-2007-0067

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service daemon crash via requests for URLs that reference certain files...

CVE-2007-0067

The CVE-2007-0067 entry describes a vulnerability in the IBM Lotus Domino Web Server affecting version 6.0, 6.5.x prior to 6.5.6, and 7.0.x prior to 7.0.3. The issue is an unspecified vulnerability that allows remote attackers to cause a denial of service by making requests for URLs that referenc...

Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow (CVE-2007-1675)

...

Cross site scripting

Cross-site scripting XSS vulnerability in the Active Content Filter feature in Domino Web Access DWA in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843...

CVE-2007-1941

Cross-site scripting XSS vulnerability in the Active Content Filter feature in Domino Web Access DWA in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843...

CVE-2007-1941

CVE-2007-1941 describes a Cross-site scripting (XSS) vulnerability in the Active Content Filter feature of Domino Web Access (DWA) in IBM Lotus Notes. Affected software: IBM Lotus Domino with DWA before 6.5.6 and 7.x before 7.0.2 FP1. The issue allows remote attackers to inject arbitrary web scri...

IBM Lotus Domino Server 6.5 (username) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python Remote DOS exploit code for IBM Lotus Domino Server 6.5. Tested on windows 2000 server SP4. The code crashes the IMAP server. Since this is a simple DOS where 256+ but no more than 270 bytes for the username crashes the service...

IBM Lotus SameTime STJNILoader.OCX ActiveX控件LoadLibrary输入验证漏洞

IBM Corp.'s Lotus Sametime产品提供实时在线会议解决方案。 IBM Corp.'s Lotus Sametime产品包含的STJNILoader.ocx组件存在输入验证问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 此控件使用如下的CLASSID： 7261EE42-318E-490A-AE8F-77649DBA1ECA and 0B9C9C7D-ED81-4594-AFCB-FC5588125382 此控件一般标记为安全脚本，并导出的LoadLibrary函数没有过滤输入，构建恶意WEB页，诱使用户访问，可导致以应用程序进程权限执行任意指令。 IB...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you...

CVE-2007-1784

The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...

Code injection

The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...

CVE-2007-1784

The CVE-2007-1784 entry affects IBM Lotus Notes Sametime (JNILoader ActiveX: STJNILoader.ocx, version 3.1.0.26) where remote attackers can cause arbitrary code execution by passing arbitrary arguments to the loadLibrary function, enabling loading of arbitrary DLLs. Impact is described as remote c...

CVE-2007-1784

The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...

IBM Lotus Domino Server 6.5 - Remote Overflow

IBM Lotus Domino Server 6.5 - Remote Overflow !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton...