CVE-2000-1047

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command...

CVE-2000-1046: Undefined Security Weakness

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long 1 "RCPT TO," 2 "SAML FROM," or 3 "SOML FROM" commands...

CVE-2000-1046

The CVE-2000-1046 issue affects Lotus Domino ESMTP service (5.0.2c and earlier). It describes multiple buffer overflows that could be triggered by long RCPT TO, SAML FROM, or SOML FROM commands, leading to denial of service and possibly remote code execution. The NVD entry assigns a base score of...

CVE-2000-1046

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long 1 "RCPT TO," 2 "SAML FROM," or 3 "SOML FROM" commands...

Дырка в виртуальной машине Java клиента Lotus Notes

Дырка в виртулаьной машине позволяет проверять наличие файла на клиентской машине...

Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5

========================================================================= Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5 http://java-house.etl.go.jp/ml/archive/j-h-b/038904.html ========================================================================= The security hole...

Lotus Notes Client R5 File Existence Verification Vulnerability

Description Lotus Notes Client R5 is a messaging and collaboration tool that contains a built in web browser. The web browser implements a Java Virtual Machine VM designed specifically for Lotus Notes. A security vulnerability exists in the Execution Control List ECL feature within the Java VM th...

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

Lotus Domino SMTP ENVID Variable Handling RCE

The Lotus Domino SMTP server running on the remote host is affected by a buffer overflow condition due to improper validation of input to the ENVID variable within a MAIL FROM command. An unauthenticated, remote attack can exploit this, via a overly long ENVID value, to cause a denial of service...

[SAFER] Buffer overflow in Lotus Domino SMTP Server

S.A.F.E.R. Security Bulletin 001103.EXP.1.9 TITLE : Buffer overflow in Lotus Domino SMTP Server DATE : November 03, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Lotus Notes/Domino 5 up to and including 5.04 PROBLEM: Buffer overflow exists in Lotus Domino SMTP server, which...

Дырка в Lotus Domino (ENVID buffer overflow)

Классическое переполнение буфера в параметре ENVID...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

CVE-1999-0429

The CVE-1999-0429 issue affects the Lotus Notes 4.5 client. The vulnerability arises when the user does not enable the Encrypt Saved Mail setting, allowing a copy of encrypted mail to be sent in the clear over the network. The NVD metrics indicate partial confidentiality and integrity/availabilit...

CVE-1999-0429: Undefined Security Weakness

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

Notes default ECL allows execution of unsigned code

Overview Lotus Notes prior to version 5.02, had permissive ECLs that allow for the execution of malicious mail messages. Description A Notes ECL is a list consisting of a Notes Username and a set of permissions from the following list for Notes 4.6.x: Access to file system Access to current...

VIGILANTE-2000011.txt

Lotus Domino ESMTP Service Buffer overflow Advisory Code: VIGILANTE-2000011 Release Date: September 11, 2000 Systems Affected: Lotus Domino Release 5.0.2a Intl ESMTP Service on OS/2 Warp 4.5 Lotus Domino Release 5.0.2c Intl ESMTP Service on OS/2 Warp 4.5 Earlier versions of the ESMTP service can ...

Уязвимость в Lotus Notes

Алгоритм хэширования паролей пользователя очень слабый - один и тот же пароль всегда дает одинаковый результат, при этом хэши паролей хранятся в файле открытом на чтение, что позволяет атаки по словарю или грубой силы...

CVE-2000-0452

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...

CVE-2000-0452

The CVE-2000-0452 entry pertained to the Lotus Domino Server 5.0.1 ESMTP service. A buffer overflow can be triggered by a long MAIL FROM command, potentially causing a denial of service. Some connected sources additionally note this vulnerability could allow execution of arbitrary code on the rem...

CVE-2000-0452: Undefined Security Weakness

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...