IBM Lotus Notes Traveler Multiple Security Vulnerabilities
BID:45564
Info
IBM Lotus Notes Traveler Multiple Security Vulnerabilities
| Bugtraq ID: | 45564 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4544 CVE-2010-4547 CVE-2010-4549 CVE-2010-4550 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2010 12:00AM |
| Updated: | Dec 23 2010 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
IBM Lotus Notes Traveler 8.5.1.2 |
| Not Vulnerable: |
IBM Lotus Notes Traveler 8.5.1.3 |
Discussion
IBM Lotus Notes Traveler Multiple Security Vulnerabilities
IBM Lotus Notes Traveler is prone to a cross-site scripting, multiple security bypass vulnerabilities and a denial-of-service vulnerability because the application fails to properly handle user-supplied input.
Attackers can exploit the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials or launch other attacks.
Successfully exploiting the security bypass issues allows a remote attacker to bypass certain security restrictions and perform unauthorized actions.
Successful exploiting the denial of service issue prevents the user from receiving email on the mobile device.
Versions prior to IBM Lotus Notes Traveler 8.5.1.3 are vulnerable.
IBM Lotus Notes Traveler is prone to a cross-site scripting, multiple security bypass vulnerabilities and a denial-of-service vulnerability because the application fails to properly handle user-supplied input.
Attackers can exploit the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials or launch other attacks.
Successfully exploiting the security bypass issues allows a remote attacker to bypass certain security restrictions and perform unauthorized actions.
Successful exploiting the denial of service issue prevents the user from receiving email on the mobile device.
Versions prior to IBM Lotus Notes Traveler 8.5.1.3 are vulnerable.
Exploit / POC
IBM Lotus Notes Traveler Multiple Security Vulnerabilities
To exploit the cross-site scripting issue, an attacker must trick an unsuspecting victim into following a malicious URI.
The attacker can exploit the other issues using readily available tools.
To exploit the cross-site scripting issue, an attacker must trick an unsuspecting victim into following a malicious URI.
The attacker can exploit the other issues using readily available tools.
Solution / Fix
IBM Lotus Notes Traveler Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
IBM Lotus Notes Traveler Multiple Security Vulnerabilities
References:
References:
- LO49967: POLICY NOT APPLIED TO LOTUS TRAVELER USER. (IBM)
- LO51818: MALFORM DOCUMENT DOES NOT CONTINUE TO PROCESS ALL OF THE ITEMS IN THE D (IBM)
- LO53572: NOKIA WILL ALLOW REPLACE DATA COMMAND ON PROHIBITED APPLICATIONS (IBM)
- Lotus Notes Traveler 851 FP3 Release Notes (IBM)
- Lotus Notes Traveler Homepage (IBM)