IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
BID:45591
Info
IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
| Bugtraq ID: | 45591 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4545 CVE-2010-4546 CVE-2010-4548 CVE-2010-4551 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2010 12:00AM |
| Updated: | Sep 15 2010 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
IBM Lotus Notes Traveler 8.5.1.1 IBM Lotus Notes Traveler 8.5.1.0 |
| Not Vulnerable: |
IBM Lotus Notes Traveler 8.5.1.2 |
Discussion
IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
IBM Lotus Notes Traveler is prone to a security-bypass vulnerability and multiple denial-of-service vulnerabilities because it fails to properly handle user-supplied input.
Successfully exploiting the security-bypass issue allows a remote attacker to bypass certain security restrictions and perform unauthorized actions.
Successful exploiting the denial-of-service issues can crash the server, denying service to legitimate users.
Versions prior to IBM Lotus Notes Traveler 8.5.1.2 are vulnerable.
IBM Lotus Notes Traveler is prone to a security-bypass vulnerability and multiple denial-of-service vulnerabilities because it fails to properly handle user-supplied input.
Successfully exploiting the security-bypass issue allows a remote attacker to bypass certain security restrictions and perform unauthorized actions.
Successful exploiting the denial-of-service issues can crash the server, denying service to legitimate users.
Versions prior to IBM Lotus Notes Traveler 8.5.1.2 are vulnerable.
Exploit / POC
IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
An attacker can exploit theses issues using readily available tools.
An attacker can exploit theses issues using readily available tools.
Solution / Fix
IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
IBM Lotus Notes Traveler Prior to 8.5.1.2 Multiple Security Vulnerabilities
References:
References:
- Lotus Notes Traveler 851 FP3 Release Notes (IBM)
- Lotus Notes Traveler Homepage (IBM)
- LO48594: TRAVELER CRASHES DOMINO SERVER IN JAVA_LOTUS_DOMINO_LOCAL_DOCUMENT_NSAV (IBM)
- LO49125: DATABASE IMPROVEMENTS TO HANDLE UNLIMITED SYNC (IBM)
- LO49829: TRAVELER STOPS FUNCTIONING WHEN PROCESSING AN INVITATION (IBM)
- LO49840: USER CAN DOWNLOAD ATTACHMENT IN PREVENT COPY MAIL (IBM)