PT-2005-3340 · Ibm · Lotus Domino

Leandro Meiners · Published 2005-08-03 · Updated 2017-09-10 · CVE-2005-2428

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lotus Domino versions R5 and R6

Description The issue allows remote attackers to obtain sensitive information by reading the HTML source. This includes the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, the client platform in the ClntPltfrm field, the client machine name in the ClntMachine field, and the client Lotus Domino release in the ClntBld field. This occurs when "Generate HTML for all fields" is enabled in Lotus Domino R5 and R6 WebMail.

Recommendations For Lotus Domino versions R5 and R6, disable the "Generate HTML for all fields" option to prevent sensitive data from being stored in hidden form fields.

Exploit

Fix

Related Identifiers

CVE-2005-2428

Affected Products

Lotus Domino

References · 14

• 🔥 https://github.com/schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit · Exploit
• 🔥 https://exploit-db.com/exploits/3302 · Exploit
• 🔥 https://exploit-db.com/exploits/39495 · Exploit
• http://www-1.ibm.com/support/docview.wss?uid=swg21212934 · Vendor Advisory
• http://secunia.com/advisories/16231 · Vendor Advisory
• http://cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2428 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21556 · Note
• http://securityfocus.com/bid/14389 · Note
• http://securiteam.com/securitynews/5FP0E15GLQ.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2428 · Note
• http://securitytracker.com/id?1014584 · Note
• http://marc.info/?l=bugtraq&m=112240869130356&w=2 · Note
• http://osvdb.org/18462 · Note