PT-2004-1244 · Ibm · Lotus Notes & Domino

L0Om · Publicado 2004-01-08 · Atualizado 2024-02-14 · CVE-2004-0029

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lotus Notes Domino version 6.0.2

Description The issue concerns a configuration file, specifically the notes.ini file, which is installed with world-writable permissions on Linux systems. This allows local users to modify the Notes configuration, potentially leading to privilege escalation.

Recommendations For Lotus Notes Domino version 6.0.2, change the permissions of the notes.ini configuration file to prevent world-writable access, restricting modifications to authorized users only.

Correção

Identificadores relacionados

CVE-2004-0029

Produtos afetados

Lotus Notes & Domino

Referências · 9

• http://marc.info/?l=bugtraq&m=107340897710308&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0029 · Nota
• http://securityfocus.com/bid/9366 · Aviso do Fabricante
• http://osvdb.org/3424 · Nota
• http://excluded.org/advisories/advisory05.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14153 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0029 · Nota de Segurança
• http://secunia.com/advisories/10566 · Nota
• http://securitytracker.com/id?1008623 · Nota