PT-2007-6566 · Ibm · Ibm Lotus Notes+1

Published 2007-10-29 · Updated 2024-02-15 · CVE-2007-5544

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes versions prior to 6.5.6 and 7.x prior to 7.0.3 IBM Domino versions prior to 6.5.5 FP3 and 7.x prior to 7.0.2 FP1

Description The issue allows local users to obtain sensitive information or inject Lotus Script into a session due to weak permissions for memory mapped files in IPC.

Recommendations For IBM Lotus Notes versions prior to 6.5.6 and 7.x prior to 7.0.3, update to a version that includes the necessary security fixes. For IBM Domino versions prior to 6.5.5 FP3 and 7.x prior to 7.0.2 FP1, update to a version that includes the necessary security fixes.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2007-5544

Affected Products

Ibm Domino

Ibm Lotus Notes

References · 7

• http://secunia.com/advisories/27321 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5544 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21257030 · Patch
• http://securityfocus.com/bid/26146 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5544 · Note
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-013.txt · Note
• http://vupen.com/english/advisories/2007/3598 · Note