PT-2004-1244 · Ibm · Lotus Notes & Domino

L0Om · Published 2004-01-08 · Updated 2024-02-14 · CVE-2004-0029

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lotus Notes Domino version 6.0.2

Description The issue concerns a configuration file, specifically the notes.ini file, which is installed with world-writable permissions on Linux systems. This allows local users to modify the Notes configuration, potentially leading to privilege escalation.

Recommendations For Lotus Notes Domino version 6.0.2, change the permissions of the notes.ini configuration file to prevent world-writable access, restricting modifications to authorized users only.

Fix

Related Identifiers

CVE-2004-0029

Affected Products

Lotus Notes & Domino

References · 9

• http://securityfocus.com/bid/9366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0029 · Security Note
• http://marc.info/?l=bugtraq&m=107340897710308&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0029 · Note
• http://osvdb.org/3424 · Note
• http://excluded.org/advisories/advisory05.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14153 · Note
• http://secunia.com/advisories/10566 · Note
• http://securitytracker.com/id?1008623 · Note