CVE-2013-0536
Summary
| CVE | CVE-2013-0536 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-06-21 17:55:00 UTC |
| Updated | 2017-08-29 01:33:00 UTC |
| Description | ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Lotus Inotes | 8.5.2.0 | All | All | All |
| Application | Ibm | Lotus Inotes | 8.5.3.0 | All | All | All |
| Application | Ibm | Lotus Inotes | 8.5.2.0 | All | All | All |
| Application | Ibm | Lotus Inotes | 8.5.3.0 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0.1 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0.2 | All | All | All |
| Application | Ibm | Lotus Notes | 8.5 | All | All | All |
| Application | Ibm | Lotus Notes | 8.5.1 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0.1 | All | All | All |
| Application | Ibm | Lotus Notes | 8.0.2 | All | All | All |
| Application | Ibm | Lotus Notes | 8.5 | All | All | All |
| Application | Ibm | Lotus Notes | 8.5.1 | All | All | All |
| Application | Ibm | Lotus Notes Traveler | 9.0 | All | All | All |
| Application | Ibm | Lotus Notes Traveler | 9.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM Security Bulletin: IBM Notes Multi User Profile Cleanup service enables an attacker to execute arbitrary code on the next logon of a user (CVE-2013-0536) - United States | CONFIRM | www-01.ibm.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.