PT-2015-1059 · Ibm · Ibm Domino

Publicado 2015-04-05 · Atualizado 2019-10-16 · CVE-2015-0134

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.1 before FP5 IF3 IBM Domino versions 8.5.2 through 8.5.2 before FP4 IF3 IBM Domino versions 8.5.3 through 8.5.3 before FP6 IF6 IBM Domino versions 9.0 through 9.0 before IF7 IBM Domino versions 9.0.1 through 9.0.1 before FP2 IF3

Description The issue is related to a buffer overflow in the SSLv2 implementation, allowing remote attackers to execute arbitrary code via unspecified vectors. This is a result of memory handling errors.

Recommendations For IBM Domino 8.5.x, update to at least 8.5.1 FP5 IF3. For IBM Domino 8.5.2, update to at least FP4 IF3. For IBM Domino 8.5.3, update to at least FP6 IF6. For IBM Domino 9.0, update to at least IF7. For IBM Domino 9.0.1, update to at least FP2 IF3.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09914

CVE-2015-0134

ZDI-15-116

Produtos afetados

Ibm Domino

Referências · 7

• https://bdu.fstec.ru/vul/2015-09914 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21700029 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0134 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-15-116 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0134 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0134 · Nota
• http://securitytracker.com/id/1032027 · Nota