PT-2010-2072 · Ibm · Ibm Lotus Notes

Published 2010-01-09 · Updated 2017-08-17 · CVE-2010-0275

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus iNotes versions prior to 229.241 for Domino 8.0.2 FP3

Description The Ultra-light Mode in IBM Lotus iNotes does not properly handle script commands in the status-alerts URL. This issue has unspecified impact and attack vectors.

Recommendations For versions prior to 229.241 for Domino 8.0.2 FP3, update to version 229.241 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0275

Affected Products

Ibm Lotus Notes

References · 7

• http://vupen.com/english/advisories/2010/0077 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27017776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0275 · Security Note
• http://secunia.com/advisories/38026 · Vendor Advisory
• http://securityfocus.com/bid/37675 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55471 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0275 · Note