Ibm

Lotus Domino

86 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-3301

  • EPSS 0.26%
  • Veröffentlicht 21.08.2012 10:46:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0....

7.8

CVE-2011-1393

  • EPSS 1.61%
  • Veröffentlicht 27.12.2011 11:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.

4.3

CVE-2011-3576

Exploit
  • EPSS 0.2%
  • Veröffentlicht 19.09.2011 12:02:57
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf.

9

CVE-2011-3575

Exploit
  • EPSS 36.3%
  • Veröffentlicht 19.09.2011 12:02:57
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdm...

7.2

CVE-2011-1520

  • EPSS 0.06%
  • Veröffentlicht 25.03.2011 19:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Loa...

10

CVE-2011-1519

  • EPSS 10.37%
  • Veröffentlicht 25.03.2011 19:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute ...

10

CVE-2011-0914

  • EPSS 11.11%
  • Veröffentlicht 08.02.2011 22:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.

9.3

CVE-2011-0920

  • EPSS 3.9%
  • Veröffentlicht 08.02.2011 22:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS.

10

CVE-2011-0919

  • EPSS 12.4%
  • Veröffentlicht 08.02.2011 22:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ.

10

CVE-2011-0918

  • EPSS 10.61%
  • Veröffentlicht 08.02.2011 22:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-...