2465 matches found
CVE-2007-1675
IBM Lotus Domino IMAP Server (nimap.exe) is affected by CVE-2007-1675 due to a buffer overflow in the CRAM-MD5 authentication path. The issue allows remote attackers to cause a denial of service by sending a long username. Affected versions are Domino before 6.5.6 and 7.x before 7.0.2 FP1; remedi...
Lotus Domino IMAP Server < 6.5.6 / 7.0.2 FP1 CRAM-MD5 Authentication Overflow
Binary data 3958.prm...
[Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability
IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Security Advisory 03.28.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 28, 2007 I. BACKGROUND IBM Lotus Domino Web Access is a web-based messaging and collaboration interface for the Lotus Domino server. More...
ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability
ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-011.html March 28, 2007 -- CVE ID: CVE-2007-1675 -- Affected Vendor: IBM -- Affected Products: IBM Lotus Domino Server 6.5 IBM Lotus Domino Server 7.0 ...
IBM Lotus Domino LDAP server DN message heap buffer overflow
Overview The IBM Lotus Domino LDAP server is vulnerable to a heap buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Description IBM Lotus Domino server software provides email, calendar, scheduling, and collaboration...
[Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability
IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability iDefense Security Advisory 03.28.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 28, 2007 I. BACKGROUND IBM Lotus Domino Server software provides messaging, calendaring and scheduling capabilities on...
Lotus Domino multiple security vulnerabilities
LDAP Server heap overflow, Web access crossite scripting. Buffer overflow in IMAP CRAM-MD5 authentication...
CVE-2007-0977
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...
Design/Logic Flaw
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...
CVE-2007-0977
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...
CVE-2007-0977
CVE-2007-0977 involves IBM Lotus Domino R5/R6 WebMail. When the option “Generate HTML for all fields” is enabled (default in these versions), HTTPPassword hashes and related data from names.nsf can be read via ReadViewEntries/OpenDocument on the defaultview, exposing passwords and client/version ...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, ...
lotus.sh.txt
!/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields,...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
Exploit for unknown platform in category remote exploits ============================================================== Lotus Domino Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attacke...
Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit
No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stor...
Lotus Domino R6 Webmail - Remote Password Hash Dumper
!/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields,...
CVE-2004-2667
Cross-site scripting XSS vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2005-4819
CVE-2005-4819 is an XSS vulnerability in Lotus Domino prior to 6.5.4 FP1 and prior to 7.0, where remote attackers could inject arbitrary script/HTML via unknown vectors. The vulnerability affects Lotus Domino server components and is triggered by cross-site scripting in web contexts. The availabl...
CVE-2005-4819
Cross-site scripting XSS vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 FP1 and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2004-2667
CVE-2004-2667 describes a cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2. According to the provided sources, remote attackers could inject arbitrary web script or HTML via unknown attack vectors. The vulnerability is documented across multiple f...