PT-2010-1244 · Ibm · Lotus Domino Server

Publicado 2010-01-25 · Atualizado 2010-01-26 · CVE-2008-7253

Mitre

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-7253

Produtos afetados

Lotus Domino Server

Referências · 5

• http://kb.cert.org/vuls/id/AAMN-5K42VT · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7253 · Nota de Segurança
• http://kb.cert.org/vuls/id/AAMN-5K42VN · Nota
• http://kb.cert.org/vuls/id/867593 · Nota
• http://www-01.ibm.com/support/docview.wss?&uid=swg21201202 · Nota