IBM Lotus Domino Multiple Vulnerabilities

Bugtraq ID:	15321
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 04 2005 12:00AM
Updated:	Nov 04 2005 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	IBM Lotus Domino 6.5.4 FP 1 IBM Lotus Domino 6.5.4 IBM Lotus Domino 6.5.3 IBM Lotus Domino 6.5.2 IBM Lotus Domino 6.5.1 IBM Lotus Domino 6.5 .0 IBM Lotus Domino 6.0.4 IBM Lotus Domino 6.0.3 IBM Lotus Domino 6.0.2 CF2 IBM Lotus Domino 6.0.2 IBM Lotus Domino 6.0.1 IBM Lotus Domino 6.0
Not Vulnerable:	IBM Lotus Domino 6.5.4 FP 2

IBM Lotus Domino Multiple Vulnerabilities

IBM Lotus Domino is prone to multiple vulnerabilities. Some of these issues can be exploited to trigger a crash, however, some unspecified issues with unknown impacts have also been identified.

These issues affect Lotus Domino versions prior to 6.5.4 Fix Pack 2.

IBM Lotus Domino Multiple Vulnerabilities

Some of these vulnerabilities do not require exploit code.

Currently we are not aware of any exploits for others issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM Lotus Domino Multiple Vulnerabilities

Solution:
IBM has released Lotus Domino 6.5.4 Fix Pack 2 to address these issues. Please see references for more information.

IBM Lotus Domino Multiple Vulnerabilities

References:

• Attachment on document causes server crash on NRouter (IBM)
  
• Crash when Update Task Runs on Domino Directory (IBM)
  
• Domino server crashes on AMGR when the OutOfOffice agent attempts to reply to a (IBM)
  
• Domino Server crashes when creating mail rules in Domino Web Access (IBM)
  
• Lotus Domino Product Homepage (IBM)
  
• Notes/Domino Fix List (IBM)
  
• Panic occurs in Cmemeql when referencing an invalid address (IBM)
  
• SPR #GPKS6C9J67 Product - Server (IBM)
  
• SPR #JGAN6B6TZ3 Product - Server (IBM)
  
• SPR #LPEE6DMQWJ Product - Server (IBM)