PT-2014-3925 · Gnu+1 · Gcc+2

Will Dormann · Publicado 2014-04-23 · Atualizado 2017-08-29 · CVE-2014-0892

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Notes and Domino versions 8.5.x through 8.5.3 FP6 IF2 and versions 9.x through 9.0.1

Description The issue arises from incorrect gcc options used in IBM Notes and Domino, which makes it easier for remote attackers to execute arbitrary code. This is possible due to the absence of the NX protection mechanism, allowing attackers to place crafted x86 code on the stack.

Recommendations For versions 8.5.x through 8.5.3 FP6 IF2, update to 8.5.3 FP6 IF3 or later. For versions 9.x through 9.0.1, update to 9.0.1 FP1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-0892

Produtos afetados

Domino

Ibm Inotes

Gcc

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21670264 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0892 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91286 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0892 · Nota
• http://kb.cert.org/vuls/id/350089 · Nota