CVE-2006-0120

CVE-2006-0120 affects IBM Lotus Notes and Domino Server prior to 6.5.5. Six distinct vectors can cause a denial of service (application crash): 1) malformed Out Of Office message, 2) the compact command, 3) malformed bitmap images, 4) Delete Attachment action, 5) parsing certificates from a remot...

[SA18328] IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities

TITLE: IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA18328 VERIFY ADVISORY: http://secunia.com/advisories/18328/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: IBM Lotus Domino Web Access iNotes 6.x...

Lotus Domino multiple vulnerabilities

Multiple vulnerabilities, including few buffer overflows...

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

CVE-2005-2619

Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

CVE-2005-4819

Cross-site scripting XSS vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 FP1 and versions before 7.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Lotus Notes WMF File Handling Code Execution Vulnerability

Information about new vulnerability affecting to Lotus Notes has been released recently at http://www.nist.org/nistplugins/content/content.php?content.25 This issue is due to Shimgvw.dll graphics rendering engine being used when rendering picture files sent as a file attachment. Reportedly person...

CVE-2002-2191

Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner...

CVE-2002-2191

This CVE affects Lotus Domino 5.0.9a and earlier. Affected component: Domino HTTP banner handling; Root cause: when a non-existent .nsf database is requested, the HTTP banner leaks the Domino version, even with DominoNoBanner=1 enabled. Impact described as potential information disclosure of vers...

Multiple IBM Lotus Domino communication server vulnerabilities

Array overflow on creating mail rules, buffer overflow on out-of-office autoreplies, multiple DoS conditions...

[SA17429] IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities

TITLE: IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA17429 VERIFY ADVISORY: http://secunia.com/advisories/17429/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: IBM Lotus Domino 6.x http://secunia.com/product/720/...

notes.ini checker

This plugin attempts to determine the existence of a directory traversal bug on the remote Lotus Domino Web server OpenVAS Vulnerability Test $Id: notesinicheck.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: notes.ini checker Authors: Hemil Shah Copyright: Copyright C 2000 - 2004 Net-Square...

Authentication bypassing in Lotus Domino

By creating a specially crafted url, the authentication mechanism of Domino database can be circumvented. SPDX-FileCopyrightText: 2002 Davy Van De Moere Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Lotus Notes Information Disclosure Vulnerability

A default behavior of Lotus Notes allows remote users to enumerate existing databases on a remote Domino Lotus Notes server. This information is considered sensitive, since it might reveal versions, logs, statistics, etc. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be...

Lotus Domino SMTP bounce DoS

The remote SMTP server maybe a Lotus Domino can be killed or disabled by a malformed message that bounces to himself. The routing loop exhausts all resources. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Lotus /./ database lock

It might be possible to lock out some Lotus Domino databases by requesting them through the web interface with a special request like /./name.nsf This attack is only efficient on databases that are not used by the server. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HCL / IBM / Lotus Domino Administration Databases Accessible (HTTP)

This script determines if some default Lotus Domino databases can be read remotely. SPDX-FileCopyrightText: 2001 Javier Fernández-Sanguino Peña Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...