Authentication flaw

Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service daemon crash via a crafted Notes RPC packet...

CVE-2011-1393

Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service daemon crash via a crafted Notes RPC packet...

CVE-2011-1393

IBM Lotus Domino Notes RPC Authentication Processing Denial of Service vulnerability (CVE-2011-1393) affects IBM Lotus Domino Server 8.x prior to 8.5.2 FP4. The issue is an unspecified flaw in the server’s authentication functionality that allows remote attackers to crash the daemon via a crafted...

IBM Lotus Domino RPC操作拒绝服务漏洞

Bugtraq ID: 51167 CVE ID：CVE-2011-1393 IBM Lotus Domino服务器是一款基于WEB合作的应用程序架构。 IBM Lotus Domino处理某些RPC操作存在错误，可被利用进行拒绝服务攻击。 远程攻击者可以提交特制的Notes客户端报文使Lotus Domino服务器崩溃。 0 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.5.2 FP3 IBM...

IBM Lotus Domino Server Controller Authentication Bypass Vulnerability

No description provided by source. Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versio...

IBM Lotus Domino Server Controller - Authentication Bypass

Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versions Affected: function onLoadConsole...

IBM Lotus Domino Authentication Bypass

Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versions Affected: function onLoadConsole...

IBM Lotus Domino Server Controller - Authentication Bypass

IBM Lotus Domino Server Controller - Authentication Bypass...

IBM Lotus Domino Server Controller Authentication Bypass Vulnerability

Exploit for jsp platform in category remote exploits Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino...

CVE-2011-4465

Cross-site scripting XSS vulnerability in IBM Lotus Mobile Connect LMC 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Mobile Connect LMC 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL...

CVE-2011-4465

Cross-site scripting XSS vulnerability in IBM Lotus Mobile Connect LMC 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL...

CVE-2011-4465

Summary: CVE-2011-4465 is a reported XSS vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 . The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL. The provided documents do not specify a concrete root cause, affected modules, or...

IBM Lotus Mobile Connect重定向URL跨站脚本漏洞

IBM Lotus Mobile Connect是一款通信软件平台，可为企业提供了一个移动虚拟私人网络。 提交给HTTP访问服务重定向URL的输入在返回用户之前缺少过滤，可被利用执行在用户浏览器上任意HTML和脚本代码。 IBM Lotus Mobile Connect 6.x 厂商解决方案 IBM Lotus Mobile Connect 6.1.4 build 20110909已经修复此漏洞，建议用户下载使用： http://www-947.ibm.com/support/entry/portal/Overview/Software/Lotus/LotusMobileConnect...

IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (CVE-2011-1213)

A code execution vulnerability has been reported in IBM Lotus Notes. The vulnerability is due to an error while parsing the headers of LZH files. A remote attacker may exploit this vulnerability by enticing a target user to open an email containing a specially crafted LZH file. Successful...

IBM Lotus Sametime配置Servlet验证安全绕过漏洞

Bugtraq ID: 50410 CVE ID：CVE-2011-1370 IBM Lotus Sametime Server是一款实时协作和网络会议解决方案。 IBM Lotus Sametime配置servlet没有对请求进行正确验证，远程攻击者可利用漏洞获得对某些配置数据的读访问，导致敏感信息泄露。 IBM Lotus Sametime 8.5.1 IBM Lotus Sametime 8.0.2 IBM Lotus Sametime 8.0.1 IBM Lotus Sametime 7.5.1 FP 1 IBM Lotus Sametime 7.5.1 IBM Lotus...

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

Default configuration

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...

CVE-2011-1370

The vulnerability CVE-2011-1370 affects IBM Lotus Sametime Server, specifically the Sametime configuration servlet (SCS) in versions 7.0 through 8.5.2. The root cause is lack of authentication on the configuration servlet, enabling remote readers to access configuration settings via responses. Im...

CVE-2011-1370

The default configuration of the Sametime configuration servlet SCS in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message...