2465 matches found
CVE-2000-1215
The default configuration of Lotus Domino server 5.0.8 includes system information version, operating system, and build date in the HTTP headers of replies, which allows remote attackers to obtain sensitive information...
CVE-2000-1047
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...
CVE-2000-1047
The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...
Доступ к прикрепленным файлам в Lotus Notes (unauthorized access)
Не имея доступа к документу непривилегированный пользователь может тем не менее получить доступ к прикрепленному файлу...
Lotus Notes: File attachments may be extracted regardless of document security
Hello, This is my first post to the list. I'll try to get this right. The short version is that file attachments and other objects may be extracted from Notes databases regardless of any author or reader fields on the documents the objects are attached to. This goes back to the structure of Notes...
CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...
CVE-1999-1012
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string...
CVE-1999-1275
The CVE-1999-1275 entry describes a local privilege escalation in Lotus cc:Mail release 8. The issue arises because the postoffice password is stored in plaintext in a hidden file with insecure permissions, allowing local users to access the password and gain privileges. The vulnerability affects...
CVE-1999-1012
The CVE-1999-1012 entry refers to the SMTP component in Lotus Domino 4.6.1 (on AS/400 and possibly other OSes), where a remote attacker can crash the mail server by sending a long string. The description provides the affected product and the root cause (unbounded/long input) leading to a service ...
CVE-2000-1203
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service CPU consumption by forging an email message with the sender as [email protected] localhost, which causes Domino to enter a mail loop...
CVE-2001-0601
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters...
CVE-2001-0604
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests 8Kb containing a large number of '/' characters...
CVE-2001-0600
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as 1 Accept, 2 Accept-Charset, 3 Accept-Encoding, 4 Accept-Language, and 5 Content-Type...
CVE-2001-0603
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large 10Kb amounts of data to the DIIOP - CORBA service on TCP port 63148...
CVE-2001-0602
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated 400 URL requests for DOS devices...
CVE-2001-0600
CVE-2001-0600 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to cause a denial-of-service by making repeated URL requests using the same HTTP headers (e.g., Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type). The issue is documented by NVD ...
CVE-2001-0604
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests 8Kb containing a large number of '/' characters...
CVE-2001-0604
CVE-2001-0604 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to induce a denial of service by sending URL requests (>8 KB) containing a large number of '/' characters. The issue is due to how such requests are processed, enabling a partial availability impac...
CVE-2001-0601
CVE-2001-0601 affects Lotus Domino R5 before 5.0.7. The vulnerability allows a remote attacker to cause a denial of service by sending HTTP requests that contain certain combinations of UNICODE characters. The DoS is related to availability impact and is described as partial. Root cause is proces...