PT-2015-1058 · Ibm · Ibm Domino

Publicado 2015-04-05 · Atualizado 2019-10-16 · CVE-2015-0117

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.3 FP6 IF5 and 9.x through 9.0.1 FP3 IF0

Description The issue is related to memory corruption errors in IBM Domino, specifically in the LDAP Server component. This can be exploited by remote attackers to execute arbitrary code or cause a denial of service.

Recommendations For versions 8.5.x through 8.5.3 FP5, update to 8.5.3 FP6 IF6 or later. For versions 9.x through 9.0.1 FP2 IF0, update to 9.0.1 FP3 IF1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-09913

CVE-2015-0117

ZDI-15-117

Produtos afetados

Ibm Domino

Referências · 7

• https://zerodayinitiative.com/advisories/ZDI-15-117 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21700029 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0117 · Nota
• https://bdu.fstec.ru/vul/2015-09913 · Nota de Segurança
• http://securitytracker.com/id/1032027 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0117 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0117 · Nota de Segurança