PT-2015-1058 · Ibm · Ibm Domino

Published 2015-04-05 · Updated 2019-10-16 · CVE-2015-0117

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.3 FP6 IF5 and 9.x through 9.0.1 FP3 IF0

Description The issue is related to memory corruption errors in IBM Domino, specifically in the LDAP Server component. This can be exploited by remote attackers to execute arbitrary code or cause a denial of service.

Recommendations For versions 8.5.x through 8.5.3 FP5, update to 8.5.3 FP6 IF6 or later. For versions 9.x through 9.0.1 FP2 IF0, update to 9.0.1 FP3 IF1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-09913

CVE-2015-0117

ZDI-15-117

Affected Products

Ibm Domino

References · 7

• https://zerodayinitiative.com/advisories/ZDI-15-117 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21700029 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09913 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0117 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0117 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0117 · Note
• http://securitytracker.com/id/1032027 · Note