PT-2001-1174 · Ibm · Lotus Notes R5

Published 2001-01-09 · Updated 2016-10-18 · CVE-2000-1138

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lotus Notes R5 client versions prior to 5.0.6

Description The issue concerns the Lotus Notes R5 client, where it fails to properly warn users when an S/MIME email message has been modified. This could allow an attacker to modify the email in transit without being detected.

Recommendations For versions prior to 5.0.6, update to a version that includes the fix for this issue to ensure proper warnings are given when an S/MIME email message has been modified.

Fix

Related Identifiers

CVE-2000-1138

Affected Products

Lotus Notes R5

References · 4

• http://securityfocus.com/bid/1925 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1138 · Security Note
• http://marc.info/?l=bugtraq&m=97370725220953&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1138 · Note