PT-2007-6687 · Ibm · Ibm Lotus Domino

Publicado 2007-10-29 · Atualizado 2017-07-29 · CVE-2007-5700

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 7.0.3

Description The issue concerns the Evaluate LotusScript method in IBM Lotus Domino, which uses an incorrect security context for @ formula commands under certain circumstances. This could potentially allow remote authenticated users to gain privileges and obtain sensitive information.

Recommendations For versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-5700

Produtos afetados

Ibm Lotus Domino

Referências · 8

• http://securityfocus.com/bid/26176 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5700 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21273266 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37369 · Nota
• http://vupen.com/english/advisories/2007/3598 · Nota
• http://osvdb.org/40951 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5700 · Nota de Segurança
• http://secunia.com/advisories/27321 · Aviso do Fabricante