PT-2008-3487 · Ibm · Ibm Lotus Expeditor Client For Desktop

Published 2008-04-25 · Updated 2018-10-11 · CVE-2008-1965

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Expeditor Client for Desktop versions 6.1.1 through 6.1.2

Description The issue allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI. This can be demonstrated by referencing a UNC share pathname.

Recommendations For versions 6.1.1 and 6.1.2, consider disabling the cai: URI handler in rcplauncher as a temporary workaround until a patch is available. Restrict access to the UNC share pathname to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-1965

Affected Products

Ibm Lotus Expeditor Client For Desktop

References · 12

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html · Exploit
• 🔥 https://exploit-db.com/exploits/31706 · Exploit
• 🔥 http://securityfocus.com/bid/28926 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1965 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21303813 · Note
• http://vupen.com/english/advisories/2008/1394/references · Note
• http://secunia.com/advisories/29958 · Note
• http://securitytracker.com/id?1019952 · Note
• http://securityfocus.com/archive/1/491343/100/0/threaded · Note
• http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability · Note
• http://securitytracker.com/id?1019951 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41990 · Note