PT-2009-3820 · Ibm · Ibm Lotus Domino

Published 2009-04-13 · Updated 2009-04-14 · CVE-2009-1286

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions 8.0.2 before FP1 IF1 IBM Lotus Domino versions 8.5 before IF3

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a MIME e-mail message with RFC822 attachments containing malformed root entities.

Recommendations For IBM Lotus Domino version 8.0.2, apply FP1 IF1 to resolve the issue. For IBM Lotus Domino version 8.5, apply IF3 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2009-1286

Affected Products

Ibm Lotus Domino

References · 10

• 🔥 http://www-01.ibm.com/support/docview.wss?uid=swg21381566 · Exploit
• 🔥 http://www-01.ibm.com/support/docview.wss?uid=swg21379894 · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21379915 · Vendor Advisory
• http://secunia.com/advisories/34657 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1286 · Security Note
• http://vupen.com/english/advisories/2009/0986 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21381562 · Patch
• http://securitytracker.com/id?1022024 · Note
• http://securityfocus.com/bid/34441 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1286 · Note