Page 31 of 158 results (0.004 seconds)

CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0

Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable. Desbordamiento de buffer en bindsock en Lotus Domino 5.0.4 a 5.0.7 en Linux permite a usuarios locales ganar privilegios de root mediante Notes_ExecDirectoryVariable de entorno PATHlargos. • http://www-1.ibm.com/support/docview.wss?uid=swg21095569 http://www-1.ibm.com/support/docview.wss?uid=swg21100441 http://www.esecurityonline.com/advisories/eSO4124.asp http://www.esecurityonline.com/advisories/eSO4126.asp http://www.securityfocus.com/bid/4317 http://www.securityfocus.com/bid/4319 https://exchange.xforce.ibmcloud.com/vulnerabilities/8583 https://exchange.xforce.ibmcloud.com/vulnerabilities/8585 •

CVSS: 5.0EPSS: 0%CPEs: 12EXPL: 0

Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino. • http://marc.info/?l=bugtraq&m=101284222932568&w=2 http://marc.info/?l=bugtraq&m=101285903120879&w=2 http://marc.info/?l=bugtraq&m=101286525008089&w=2 http://www.iss.net/security_center/static/8072.php http://www.nextgenss.com/papers/hpldws.pdf http://www.securityfocus.com/bid/4022 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information. • http://marc.info/?l=bugtraq&m=100094373621813&w=2 http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM http://www.kb.cert.org/vuls/id/984555 https://exchange.xforce.ibmcloud.com/vulnerabilities/10685 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0

Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. • http://ciac.llnl.gov/ciac/bulletins/l-116.shtml http://www.cert.org/advisories/CA-2001-18.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3 http://www.kb.cert.org/vuls/id/583184 http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8 http://www.securityfocus.com/bid/3042 https://exchange.xforce.ibmcloud.com/vulnerabilities/6896 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0

Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. • http://ciac.llnl.gov/ciac/bulletins/l-116.shtml http://www.cert.org/advisories/CA-2001-18.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3 http://www.kb.cert.org/vuls/id/583184 http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8 http://www.securityfocus.com/archive/1/314909/30/25520/threaded http://www.securityfocus.com/bid/3041 https://exchange.xforce.ibmcloud.com/vulnerabilities/6895 •