Lucene search
+L

380 matches found

CVE
CVE
•added 2011/09/24 12:00 a.m.•54 views

CVE-2011-3780

The CVE-2011-3780 entry concerns PHP iCalendar 2.4. It describes an information-disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly, causing an error message that reveals the installation path (examples reference rss/rss_common.php and simil...

5CVSS6.4AI score0.01229EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/09/24 12:00 a.m.•4 views

CVE-2011-3780: Exposure of Sensitive Information to an Unauthorized Actor

PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by rss/rsscommon.php and certain other files...

5CVSS5.9AI score0.01229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/09/24 12:00 a.m.•4 views

PT-2011-4670

Name of the Vulnerable Software and Affected Versions PHP iCalendar version 2.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as rss/rss common.php, which reveals the installation path i...

5CVSS0.01229EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2011/04/22 12:00 a.m.•76 views

IBM Lotus Domino iCalendar Email Address ORGANIZER:mailto Header Remote Overflow

According to its self-reported version, the remote SMTP service is an instance of IBM Lotus Domino that is is affected by a remote stack-based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow...

9.3CVSS6.3AI score0.41475EPSS
SaveExploits10References7
Packet Storm
Packet Storm
•added 2011/04/06 12:00 a.m.•55 views

IBM Lotus Domino iCalendar MAILTO Buffer Overflow

$Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

9.3CVSS0.1AI score0.41475EPSS
SaveExploits10
Exploit DB
Exploit DB
•added 2011/04/04 12:00 a.m.•56 views

IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)

$Id: dominoicalendarorganizer.rb 12236 2011-04-04 17:43:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

9.3CVSS5.2AI score0.41475EPSS
SaveExploits10
d2
d2
•added 2011/02/08 10:00 p.m.•585 views

DSquare Exploit Pack: D2SEC_LOTUSCAL2

Name| d2seclotuscal2 ---|--- CVE| CVE-2011-0915 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino iCalendar Meeting Request Stack Overflow Vulnerability Notes|...

10CVSS4.1AI score0.11584EPSS
SaveExploits1
CVE
CVE
•added 2011/02/08 9:00 p.m.•114 views

CVE-2011-0915

IBM Lotus Domino 8.5.x is affected by CVE-2011-0915 due to a stack-based buffer overflow in nrouter.exe when handling a long name parameter in a Content-Type header of malformed Notes calendar (iCal) meeting requests. The root cause is an overflow in the named field during iCalendar processing, p...

10CVSS8AI score0.11584EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
•added 2011/02/08 12:00 a.m.•17 views

IBM Lotus Domino iCalendar Meeting Request Parsing Remote Stack Buffer Overflow Vulnerability

IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7.1AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/02/07 12:00 a.m.•4 views

PT-2011-2758

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 8.5.3 Description The issue is related to a stack-based buffer overflow in the nrouter.exe component, which can be triggered by a remote attacker sending a malformed Notes calendar meeting request with a long...

10CVSS0.11584EPSS
SaveExploits1References7
Zero Day Initiative
Zero Day Initiative
•added 2011/02/07 12:00 a.m.•57 views

(0Day) IBM Lotus Domino iCalendar Meeting Request Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed calendar meeting...

10CVSS5.6AI score0.11584EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
•added 2010/10/06 12:00 a.m.•5 views

IBM Lotus Domino nrouter.exe iCalendar MAILTO Stack Buffer Overflow

Lotus Domino is an IBM server product that provides enterprise e-mail, collaboration capabilities, and a custom application platform. Domino supports iCalendar technology to enable scheduling. A stack buffer overflow vulnerability exists in IBM Lotus Domino Server. The vulnerability is due an err...

7.6AI score
SaveExploits0
Saint
Saint
•added 2010/09/24 12:00 a.m.•49 views

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

9.3CVSS7.8AI score0.41475EPSS
SaveExploits10
Saint
Saint
•added 2010/09/24 12:00 a.m.•50 views

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

9.3CVSS7.8AI score0.41475EPSS
SaveExploits10
d2
d2
•added 2010/09/16 9:00 p.m.•69 views

DSquare Exploit Pack: D2SEC_LOTUSCAL

Name| d2seclotuscal ---|--- CVE| CVE-2010-3407 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Notes|...

9.3CVSS4AI score0.41475EPSS
SaveExploits10
Prion
Prion
•added 2010/09/16 9:00 p.m.•36 views

Stack overflow

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in...

9.3CVSS8.4AI score0.41475EPSS
SaveExploits10References14Affected Software1
CVE
CVE
•added 2010/09/16 8:00 p.m.•110 views

CVE-2010-3407

IBM Lotus Domino server vulnerability CVE-2010-3407 exploitable via a stack-based overflow in MailCheck821Address (nnotes.dll) inside nrouter.exe. Remote attacker can execute arbitrary code by sending a long e-mail address in an ORGANIZER:mailto header of an iCalendar invitation. Affected: Lotus ...

9.3CVSS7.9AI score0.41475EPSS
SaveExploits10References14Affected Software1
securityvulns
securityvulns
•added 2010/09/16 12:00 a.m.•27 views

IBM Lotus Domino buffer overflow

Buffer overflow on oversized mailto within iCalendar...

5AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/09/16 12:00 a.m.•5 views

CVE-2010-3407: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in...

9.3CVSS6.8AI score0.41475EPSS
SaveExploits10References2
zdt
zdt
•added 2010/09/15 12:00 a.m.•38 views

IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow

Exploit for windows platform in category remote exploits ============================================================== IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow ============================================================== source:...

7.1AI score
SaveExploits0
Rows per page
Query Builder