PT-2007-6687 · Ibm · Ibm Lotus Domino

Published 2007-10-29 · Updated 2017-07-29 · CVE-2007-5700

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 7.0.3

Description The issue concerns the Evaluate LotusScript method in IBM Lotus Domino, which uses an incorrect security context for @ formula commands under certain circumstances. This could potentially allow remote authenticated users to gain privileges and obtain sensitive information.

Recommendations For versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-5700

Affected Products

Ibm Lotus Domino

References · 8

• http://securityfocus.com/bid/26176 · Patch
• http://www-1.ibm.com/support/docview.wss?uid=swg21273266 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5700 · Security Note
• http://secunia.com/advisories/27321 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5700 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37369 · Note
• http://vupen.com/english/advisories/2007/3598 · Note
• http://osvdb.org/40951 · Note