POP3 Server type and version

This detects the POP3 Server SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10185";...

CVE-2005-3015

Cross-site scripting XSS vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 BaseTarget or 2 Src parameters...

CVE-2005-3015

Cross-site scripting XSS vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 BaseTarget or 2 Src parameters...

CVE-2005-3015

CVE-2005-3015 corresponds to an XSS vulnerability in IBM Lotus Domino 6.5.2 where remote attackers can inject arbitrary script via the BaseTarget or Src parameters in the Domino web server. The issue arises from insufficient sanitization of user-supplied data, enabling script execution in a victi...

Lotus Domino Multiple Script Src / BaseTarget XSS

The remote host runs Lotus Domino web server. The installed version of Lotus Domino is vulnerable to multiple cross- site scripting attacks due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute malicious script code in a user's...

Lotus Domino Server Multiple XSS

Binary data 3226.prm...

[SA16830] IBM Lotus Domino "BaseTarget" and "Src" Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Lotus Domino crossite scripting

No description provided...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

CVE-2005-2696

CVE-2005-2696 concerns IBM Lotus Notes/NAB where password hashes could be accessed remotely due to improper restriction of access to password hash data. The description specifies three leakage vectors: (1) password digest in the Administration tab of a Notes client, (2) PasswordDigest and HTTPPas...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

Lotus Domino weak files permissions

Database names.nsf with password hashes is world readable...

IBM Lotus Notes multiple disclosures of password hashes

Summary ======== A vulnerability describing password hashes disclosure in Domino webmail was published in July 2005.A further test revealed disclosed password hashes in the Lotus Notes client and in Domino LDAP. Details ======= Lotus Notes client can be used to access the Notes Address Book NAB...

CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...

CVE-2004-2310

Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...

CVE-2004-2311

CVE-2004-2311: Directory traversal in webadmin.nsf (Lotus Domino R6 6.5.1) allows local users to create folders or check for files via a .. in the new folder dialog. Affected: Lotus Domino Web Admin (webadmin.nsf). Root cause: directory traversal through dot-dot in UI. Exploitation status and pat...

CVE-2004-2310

The CVE-2004-2310 entry concerns Lotus Domino R6 6.5.1, specifically the webadmin.nsf component, which is vulnerable to Cross-site Scripting (XSS). The vulnerability arises from accepting a Domino command via the Quick Console, enabling remote attackers to inject arbitrary web script/HTML. Accord...

CVE-2004-2311

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. dot dot in the new folder dialog...

CVE-2004-2369

Technical details (affected product/component/root cause/impact/fix) are not publicly available in the provided documents for CVE-2004-2369. Monitor official advisories for updates; current data only confirms a directory traversal vulnerability in webadmin.nsf.

[NEWS] Default Configuration Information Disclosure in Lotus Domino (Including Password Hashes)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...