Lotus Domino Web Administrator Template ReplicaID Access (#NISR29102001A)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Administrator Template ReplicaID Access Systems Affected: Lotus Domino 5.x on all operating systems Severity: High Risk Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001...

Lotus Domino View ACL by-pass (#NISR29102001C)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...

Lotus Domino Default Navigator Protection By-pass (#NISR29102001B)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino Default Navigator Protection By-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Low Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Adviso...

Управляющие элементы в письмах Lotus Notes (code execution)

Письма Lotus Notes могут содержать исполняемые процедуры VBS, которые будут выполнены незаметно для пользователя...

Security BugWare Advisory

----www.securitybugware.org---- A D V I S O R I E S Dear World, From 1996 to 9th Sep 2001, Hrvoje Crvelin maintained the most explicit website about bugs, exploits, and solutions. He decided to stop this project. As there is no such resource on the web, we decided to keep this one alive. Behind t...

CVE-2001-1018

Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...

lotus domino server 5.08 is very gabby

maybe this is nothing new, but when i looked at some html raw headers after i surfed to a lotus domino 5.08 webserver, he tells me the following information : Lotus-Domino Release 5.0.8 - June 18, 2001 on AIX and further a request like this : GET //////////// HTTP/1.0 gives me the internal...

Получение реального IP сервера Lotus Domino (information leakage)

С помощью запроса GET //////////// HTTP/1.0 можно получить сведения о реальном IP Сервера...

Default installations of the Lotus Domino web server disclose system information via HTTP headers

Overview The default configuration of the Lotus Domino web server discloses system characteristics to anonymous remote users. Description The default configuration of the Lotus Domino web server discloses system information in the HTTP headers it returns to a web browser. If these headers are...

CVE-2000-1215

The default configuration of Lotus Domino server 5.0.8 includes system information version, operating system, and build date in the HTTP headers of replies, which allows remote attackers to obtain sensitive information...

CVE-2000-1047

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...

CVE-2000-1047

The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...

CVE-2000-1047: Undefined Security Weakness

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...

Lotus Notes: File attachments may be extracted regardless of document security

Hello, This is my first post to the list. I'll try to get this right. The short version is that file attachments and other objects may be extracted from Notes databases regardless of any author or reader fields on the documents the objects are attached to. This goes back to the structure of Notes...

Доступ к прикрепленным файлам в Lotus Notes (unauthorized access)

Не имея доступа к документу непривилегированный пользователь может тем не менее получить доступ к прикрепленному файлу...

CVE-1999-1012

SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string...

CVE-1999-1275

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...

CVE-1999-1012

The CVE-1999-1012 entry refers to the SMTP component in Lotus Domino 4.6.1 (on AS/400 and possibly other OSes), where a remote attacker can crash the mail server by sending a long string. The description provides the affected product and the root cause (unbounded/long input) leading to a service ...

CVE-1999-1275

The CVE-1999-1275 entry describes a local privilege escalation in Lotus cc:Mail release 8. The issue arises because the postoffice password is stored in plaintext in a hidden file with insecure permissions, allowing local users to access the password and gain privileges. The vulnerability affects...

CVE-1999-1275: Undefined Security Weakness

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...