PT-2002-1173 · Ibm · Lotus Domino

Publicado 2002-03-07 · Atualizado 2017-07-11 · CVE-2002-0086

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lotus Domino versions 5.0.4 through 5.0.7

Description A buffer overflow issue exists in the bindsock component of Lotus Domino on Linux, allowing local users to escalate privileges to root. This can be achieved by manipulating either the Notes ExecDirectory or PATH environment variables to be excessively long.

Recommendations For Lotus Domino version 5.0.4, update to a version that addresses this issue. For Lotus Domino version 5.0.7, update to a version that addresses this issue. As a temporary workaround, consider restricting the length of the Notes ExecDirectory and PATH environment variables to prevent exploitation.

Correção

Identificadores relacionados

CVE-2002-0086

Produtos afetados

Lotus Domino

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/8585 · Nota
• http://securityfocus.com/bid/4317 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21095569 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21100441 · Nota
• http://esecurityonline.com/advisories/eSO4126.asp · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0086 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8583 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0086 · Nota
• http://esecurityonline.com/advisories/eSO4124.asp · Aviso do Fabricante
• http://securityfocus.com/bid/4319 · Nota