5

CVE-2006-3778

Exploit
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version6.0
Ibm ≫ Lotus Notes Version6.5
Ibm ≫ Lotus Notes Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.48% 0.706
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21096
Vendor Advisory
http://securitytracker.com/id?1016516
http://securitytracker.com/id?1016819
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386
Exploit