Vulnerability Bulletins |
Múltiples desbordamientos de búfer en IBM Lotus Notes |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
IBM Lotus Notes 6.x < 6.5.5 IBM Lotus Notes 7.x < 7.0.1 |
Description |
|
|
Se han descubierto cinco desbordamientos de búfer y un directorio transversal en IBM Lotus Notes 6.x y 7.x. Las vulnerabilidades residen en el manejo de ciertos ficheros adjuntos en mensajes por parte del visor KeyView del cliente de Lotus Notes. Un atacante remoto podría ejecutar código arbitrario mediante mensajes con ficheros adjuntos especialmente diseñados que el usuario víctima tendría que visualizar. |
|
Solution |
|
|
Actualización de software IBM Notes 6.x / Notes 6.5.5 Notes 7.x / Notes 7.0.1 http://www.ibm.com/software/lotus/support/upgradecentral/index.html |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2005-2618 CVE-2005-2619 |
| BID | |
Other resources |
|
|
IBM Lotus Security Advisory (1229918) http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21229918 Secunia Advisory (SA16280) http://secunia.com/advisories/16280/ Secunia Research 10/02/2006 http://secunia.com/secunia_research/2005-30/advisory/ Secunia Research 10/02/2006 http://secunia.com/secunia_research/2005-32/advisory Secunia Research 10/02/2006 http://secunia.com/secunia_research/2005-34/advisory Secunia Research 10/02/2006 http://secunia.com/secunia_research/2005-36/advisory Secunia Research 10/02/2006 http://secunia.com/secunia_research/2005-37/advisory |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-02-13 |