7.8

CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Domino Version < 6.5.5
Ibm ≫ Lotus Domino Version >= 7.0 < 7.0.2
Ibm ≫ Lotus Domino Version6.5.5 Update-
Ibm ≫ Lotus Domino Version7.0.2 Update-
Ibm ≫ Lotus Notes Version <= 6.5.5
Ibm ≫ Lotus Notes Version >= 7.0.0 < 7.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.184
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://secunia.com/advisories/27321
Patch
Vendor Advisory
Broken Link
http://www.vupen.com/english/advisories/2007/3598
Permissions Required
http://www-1.ibm.com/support/docview.wss?uid=swg21257030
Patch
Broken Link
http://www.securityfocus.com/bid/26146
Third Party Advisory
Broken Link
VDB Entry
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-013.txt
Not Applicable