2465 matches found
CVE-2002-0086
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long 1 NotesExecDirectory or 2 PATH environment variable...
CVE-2001-0954
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service block access to databases that have not been previously accessed via a URL that includes the . dot directory...
CVE-2001-0954
The provided sources confirm a Denial of Service flaw in IBM Lotus Domino (Lotus Domino 5.0.5/5.0.8 and possibly other versions), triggered by a crafted web request that includes a "/./" path segment in the URL. The vulnerability is advisory-listed as CVE-2001-0954 and is exploited by a remote at...
CVE-2000-0891
The CVE-2000-0891 issue concerns Lotus Notes prior to 5.02 where default ECLs were permissive enough to allow arbitrary code execution when a user opens an email containing a malicious program attached to the message. The underlying cause is a misconfigured ECL that lets an attacker attach a prog...
CVE-2001-0846
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file webadmin.ntf...
CVE-2001-0846
The provided documents describe CVE-2001-0846: Lotus Domino 5.x is vulnerable to a remote attacker who can read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). The exact vulnerable component is not more precisely broken down beyon...
CVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email...
CVE-2002-0087
CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.
CVE-2002-0086
CVE-2002-0086 involves a buffer overflow in the Linux version of Lotus Domino’s bindsock utility (affected: Domino 5.0.4 and 5.0.7). The vulnerability is triggered by excessively long environment variables (Notes_ExecDirectory or PATH), allowing a local attacker to execute code with root privileg...
CVE-2002-0087
bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...
CVE-2002-0086
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long 1 NotesExecDirectory or 2 PATH environment variable...
KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service
-------------------------------------------------------------------- -=Lotus Domino Webserver DOS-device Denial of Service=- courtesy of KMPG Denmark BUG-ID: 2002004 Released: 4th Feb 2002 -------------------------------------------------------------------- Problem: ======== The Domino Webserver...
lotus.domino.bypass.txt
--------------------------------------------------------------------------- Web: http://qb0x.net Author: Gabriel A. Maggiotti Date: Febrary 03, 2002 E-mail: [email protected] --------------------------------------------------------------------------- General Info ------------ Problem Type :...
Несанкционированный доступ в Lotus Domino (protection bypass)
Можно получить доступ к URL закрытой паролем, используя запрос определенной длины...
Lotus Domino url bypass
--------------------------------------------------------------------------- Web: http://qb0x.net Author: Gabriel A. Maggiotti Date: Febrary 03, 2002 E-mail: [email protected] --------------------------------------------------------------------------- General Info ------------ Problem Type :...
CVE-2001-1018
The CVE-2001-1018 issue affects Lotus Domino Web Server 5.08, where a crafted HTTP GET containing a long sequence of '/' exposes the server’s internal IP address when NAT is enabled. The vulnerability is caused by information disclosure in the server’s response, enabling remote attackers to deter...
CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...
CVE-2001-1504
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message...
CVE-2001-1567
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files .ntf via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by...