CVE-2006-5835

The Notes Remote Procedure Call NRPC protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file...

CVE-2006-5835

The Notes Remote Procedure Call NRPC protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file...

CVE-2006-5835

IBM Lotus Notes Domino NRPC allows unauthenticated user lookups, enabling remote attackers to obtain user ID files. Affected: Domino before 6.5.5 FP2 and 7.x before 7.0.2. Impact: potential disclosure of user IDs. Remediation: upgrade to 6.5.5 FP2+ or 7.0.2+. OpenVAS/NT-based tooling references i...

IBM Lotus Notes NRPC协议信息泄露漏洞

Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构，运行在Linux/Unix和Microsoft Windows操作系统平台下。 IBM Lotus Domino中运行在1352端口上的Notes远程过程调用（NRPC）协议在使用未经认证的名称查询事件时存在漏洞，允许攻击者列出有效的用户名和下载已有用户的用户ID文件。但下载后攻击者必须使用暴力猜测口令才能使用这些用户ID。 IBM Lotus Domino 7.0 IBM Lotus Domino 6.5 IBM Lotus Domino 6.0 IBM Lotus Domino 5.0...

IBM Lotus Domino多个TuneKrnl本地权限提升漏洞

Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构，运行在Linux/Unix和Microsoft Windows操作系统平台下。 Lotus Domino的tunekrnl在处理数据拷贝时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 tunekrnl二进制程序用于设置Linux/proc sysctl，允许Domino增加正在运行内核的资源限制。这个二进制程序默认将所有者设置为root，并将set-user-id位设置为on。由于在进行拷贝时没有正确的验证输入的长度，本地攻击者可能触发缓冲区溢出，获得root权限提升。 IBM Lotus...

CVE-2006-5818

Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors...

CVE-2006-5818

Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors...

CVE-2006-5818

CVE-2006-5818 involves multiple buffer overflows in tunekrnl within IBM Lotus Domino. Affected products are Domino 6.x (prior to 6.5.5 FP2) and 7.x (prior to 7.0.2). The root cause is buffer overflow in tunekrnl, with local users able to gain privileges and execute arbitrary code via unspecified ...

[Full-disclosure] Lotus Notes pre-login User.ID key leak

Hello, We have coordinated a vuln disclosure with IBM Lotus Notes security for today, relating to an info leak issue with Lotus Notes where it is possible to: 1. Retrieve User.ID keyfiles, without entering a valid passphrase as is normally required 2. Validate existing Lotus Notes users login nam...

Lotus Domino tunekrnl utility buffer overflow

Multiple buffer overflows in suid utility...

Lotus Notes information leak

It's possible to check user existance and download certificate of new user with TCP/1352 port protocol...

[Full-disclosure] iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities

IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND IBM Lotus Domino is a software suite designed to facilitate collaboration between co-workers. More information can be found at...

Solaris 5.6 (sparc) : 108447-04

Sun Cluster 2.2: HA-Lotus Patch. Date this patch was last updated by Sun : Jul/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Fenestrae Faxination Server远程代码执行漏洞

Fenestrae Faxination Server是应用于Microsoft Exchange和Lotus Notes的传真服务器解决方案。 Fenestrae Faxination Server对用户请求的处理上存在漏洞，远程用户可以通过发送特制的报文导致在Faxination服务器上以本地系统权限执行任意命令。 Fenestrae Faxination Server 6.0 Fenestrae Faxination Server 5.0 Fenestrae Faxination Server 4.0...

Microsoft Excel Lotus 1-2-3文件处理远程代码执行漏洞（MS06-059）

Microsoft Excel是非常流行的电子表格工具。 Excel在处理Lotus 1-2-3文件时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Excel Viewer 2003 Microsoft Excel v.X for Mac Microsoft Excel 2004 for Mac Microsoft Excel 2003 Microsoft Excel 2002 Microsoft Excel 2000...

CVE-2006-5489

Research in Motion RIM BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service application hang via a deleted recurrent meeting instance when changing the attendee's calendar meeting time...

CVE-2006-5489

The CVE-2006-5489 entry affects Research in Motion BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino . The issue allows attackers with meeting organizer privileges to trigger a denial of service (application hang) by manipulating a deleted recurrent meeting instance when c...

CVE-2006-5489

Research in Motion RIM BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service application hang via a deleted recurrent meeting instance when changing the attendee's calendar meeting time...

InnerMedia DUNZIP32.dll远程栈溢出漏洞

DUNZIP32.dll是一个流行的第三方压缩媒体库。 很多应用程序都用到了DUNZIP32.dll做为压缩库。DUNZIP32.dll在解压有超长用户名的压缩文件时存在栈溢出漏洞，可能允许攻击者在用户系统上执行任意代码。 0 McAfee VirusScan 10.x Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks RealOne Player 2.0 IBM Lotus Notes = 5.0.10 IBM Lotus Notes 6.5.4 McAfee SecurityCenter 6...

IBM Lotus Notes本地不安全默认目录权限漏洞

Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构，运行在Linux/Unix和Microsoft Windows操作系统平台下。 Lotus Notes对文件访问的权限控制上存在漏洞，本地攻击者可能利用此漏洞非授权访问文件。 Lotus Notes对notes目录及其所有子对象设置了不安全的默认权限，对Everyone组分配了Full Control权限，这允许本地攻击者能够删除、操控和替换应用程序的任何文件。 IBM Lotus Notes 7.0.1 IBM Lotus Notes 7.0 IBM Lotus Notes 6.5.5 IBM Lotus...