Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5

========================================================================= Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5 http://java-house.etl.go.jp/ml/archive/j-h-b/038904.html ========================================================================= The security hole...

Дырка в виртуальной машине Java клиента Lotus Notes

Дырка в виртулаьной машине позволяет проверять наличие файла на клиентской машине...

Lotus Notes Client R5 File Existence Verification Vulnerability

Description Lotus Notes Client R5 is a messaging and collaboration tool that contains a built in web browser. The web browser implements a Java Virtual Machine VM designed specifically for Lotus Notes. A security vulnerability exists in the Execution Control List ECL feature within the Java VM th...

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

Lotus Domino SMTP ENVID Variable Handling RCE

The Lotus Domino SMTP server running on the remote host is affected by a buffer overflow condition due to improper validation of input to the ENVID variable within a MAIL FROM command. An unauthenticated, remote attack can exploit this, via a overly long ENVID value, to cause a denial of service...

Дырка в Lotus Domino (ENVID buffer overflow)

Классическое переполнение буфера в параметре ENVID...

[SAFER] Buffer overflow in Lotus Domino SMTP Server

S.A.F.E.R. Security Bulletin 001103.EXP.1.9 TITLE : Buffer overflow in Lotus Domino SMTP Server DATE : November 03, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Lotus Notes/Domino 5 up to and including 5.04 PROBLEM: Buffer overflow exists in Lotus Domino SMTP server, which...

CVE-1999-0429

The CVE-1999-0429 issue affects the Lotus Notes 4.5 client. The vulnerability arises when the user does not enable the Encrypt Saved Mail setting, allowing a copy of encrypted mail to be sent in the clear over the network. The NVD metrics indicate partial confidentiality and integrity/availabilit...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

Notes default ECL allows execution of unsigned code

Overview Lotus Notes prior to version 5.02, had permissive ECLs that allow for the execution of malicious mail messages. Description A Notes ECL is a list consisting of a Notes Username and a set of permissions from the following list for Notes 4.6.x: Access to file system Access to current...

VIGILANTE-2000011.txt

Lotus Domino ESMTP Service Buffer overflow Advisory Code: VIGILANTE-2000011 Release Date: September 11, 2000 Systems Affected: Lotus Domino Release 5.0.2a Intl ESMTP Service on OS/2 Warp 4.5 Lotus Domino Release 5.0.2c Intl ESMTP Service on OS/2 Warp 4.5 Earlier versions of the ESMTP service can ...

Уязвимость в Lotus Notes

Алгоритм хэширования паролей пользователя очень слабый - один и тот же пароль всегда дает одинаковый результат, при этом хэши паролей хранятся в файле открытом на чтение, что позволяет атаки по словарю или грубой силы...

CVE-2000-0452

The CVE-2000-0452 entry pertained to the Lotus Domino Server 5.0.1 ESMTP service. A buffer overflow can be triggered by a long MAIL FROM command, potentially causing a denial of service. Some connected sources additionally note this vulnerability could allow execution of arbitrary code on the rem...

CVE-2000-0452

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...

Дырки в Lotus Domino

Классическое переполнение буфера в SMTP-команде MAIL FROM: при буфере свыше 4Kb. Кроме того, в конфигурации по-умолчанию документы могут быть модифицированы через Web-сервер. Кроме того, возможна DoS атака против почтового сервера, при посылке письма с одного несуществующего адреса на другой...

Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

Black Watch Labs Vulnerability Alert

Dear Security Professional, The following vulnerability: "Lotus Domino Server Misconfiguration – Documents Can Be Modified over the Web" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black...

Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl))

Not much to say. While performing basic input validation checks in Lotus Domino ESMTP service see subject running on the top of Windows NT system this applies probably to other platforms as well, within approximately 30 seconds we found remote buffer overflow leading to system crash and, if...

CVE-2000-0452

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' an...