2895 matches found
CVE-2004-0669: Undefined Security Weakness
Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command...
DoS against Domino 6.5.1
Hello, this problem has been reported to IBM Lotus customer support PMR 37321,999,724 on Feb 16, 2004 and was reproduced by them. Affected versions: Domino 6.5.1 and newer on Linux other platforms not tested by me, but Domino 6.5.1 on Windows has been found to be vulnerable too by IBM support...
Lotus Domino quota settings change
By using IMPAP setquota command it's possible to change quota settings...
CVE-2004-0480
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...
CVE-2004-0480
Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...
PT-2004-1599 · Ibm · Ibm Lotus Notes
Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions 6.0.3 through 6.5 Description: The issue allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Thi...
IBM Lotus Domino Server 6 - Web Access Remote Denial of Service
IBM Lotus Domino Server 6 - Web Access Remote Denial of Service source: https://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is...
IBM Lotus Domino Server 6 - Web Access Remote Denial of Service
source: https://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is opened through the Domino Web Access interface by a client. A...
CVE-2004-0480: Improper Neutralization of Argument Delimiters in a Command
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...
Lotus Notes URI command line modification
notes: URI allows to execute notes.exe with any arguments, for example to cpecify .ini file location...
[Full-Disclosure] Lotus Notes URL argument injection vulnerability
OVERVIEW ======== Lotus Notes is a groupware/e-mail system developed by Lotus Software. Due to its security and collaboration features it's used particularly by large organizations, government agencies, etc. IBM estimates it is used by 60 million people. During the client-side Windows installatio...
[Full-Disclosure] iDEFENSE Security Advisory 06.23.04: Lotus Notes URI Handler Argument Injection Vulnerability
Lotus Notes URI Handler Argument Injection Vulnerability iDEFENSE Security Advisory 06.23.04 www.idefense.com/application/poi/display?id=111&type=vulnerabilities June 23, 2004 I. BACKGROUND Lotus Notes combines enterprise-class messaging, calendaring and scheduling capabilities with a robust...
IBM Lotus Domino ?ReadDesign Request Design Element Disclosure
The remote web server allows an attacker to view an XML list of design elements by sending a specially crafted HTTP request to the remote Lotus Domino server: http://target/names.nsf/view?ReadDesign Copyright C 2000 - 2004 Net-Square Solutions Pvt Ltd. By: Hemil Shah Desc: This script will check...
IBM Lotus Domino Server Crafted .nsf Request Traversal Arbitrary File Access
Using a specially crafted request URL containing '.nsf/..', the installed version of Lotus Domino on the remote host can be abused to reveal the contents of arbitrary files on the server. Copyright C 2000 - 2009 Net-Square Solutions Pvt Ltd. By: Hemil Shah Desc: This script will check for the...
IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal
IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The...
IBM Lotus Domino 6.5.1 - HTTP webadmin.nsf Quick Console Cross-Site Scripting
IBM Lotus Domino 6.5.1 - HTTP webadmin.nsf Quick Console Cross-Site Scripting source: https://www.securityfocus.com/bid/9901/info It has been reported that Lotus Domino server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a...
IBM Lotus Domino 6.5.1 - HTTP webadmin.nsf Quick Console Cross-Site Scripting
source: https://www.securityfocus.com/bid/9901/info It has been reported that Lotus Domino server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of...
IBM Lotus Domino 6/7 - HTTP webadmin.nsf Directory Traversal
source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in the server's administrative...
