CVE-2007-4474 (GCVE-0-2007-4474)

Vulnerability from cvelistv5 – Published: 2007-12-27 22:00 – Updated: 2024-08-07 14:53
VLAI?
Summary
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.securitytracker.com/id?1019138 vdb-entryx_refsource_SECTRACK
https://www.exploit-db.com/exploits/5111 exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/26972 vdb-entryx_refsource_BID
http://lists.grok.org.uk/pipermail/full-disclosur… mailing-listx_refsource_FULLDISC
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4820 exploitx_refsource_EXPLOIT-DB
http://www.kb.cert.org/vuls/id/963889 third-party-advisoryx_refsource_CERT-VN
http://www.vupen.com/english/advisories/2007/4296 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/28184 third-party-advisoryx_refsource_SECUNIA
https://www.exploit-db.com/exploits/4818 exploitx_refsource_EXPLOIT-DB
http://osvdb.org/40954 vdb-entryx_refsource_OSVDB
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:53:55.977Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1019138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019138"
          },
          {
            "name": "5111",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/5111"
          },
          {
            "name": "26972",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26972"
          },
          {
            "name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
          },
          {
            "name": "domino-dwa7w-bo(39175)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
          },
          {
            "name": "4820",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/4820"
          },
          {
            "name": "VU#963889",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/963889"
          },
          {
            "name": "ADV-2007-4296",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4296"
          },
          {
            "name": "28184",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28184"
          },
          {
            "name": "4818",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/4818"
          },
          {
            "name": "40954",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/40954"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "1019138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019138"
        },
        {
          "name": "5111",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/5111"
        },
        {
          "name": "26972",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26972"
        },
        {
          "name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
        },
        {
          "name": "domino-dwa7w-bo(39175)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
        },
        {
          "name": "4820",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/4820"
        },
        {
          "name": "VU#963889",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/963889"
        },
        {
          "name": "ADV-2007-4296",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4296"
        },
        {
          "name": "28184",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28184"
        },
        {
          "name": "4818",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/4818"
        },
        {
          "name": "40954",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/40954"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2007-4474",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1019138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019138"
            },
            {
              "name": "5111",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/5111"
            },
            {
              "name": "26972",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26972"
            },
            {
              "name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
            },
            {
              "name": "domino-dwa7w-bo(39175)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
            },
            {
              "name": "4820",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/4820"
            },
            {
              "name": "VU#963889",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/963889"
            },
            {
              "name": "ADV-2007-4296",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4296"
            },
            {
              "name": "28184",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28184"
            },
            {
              "name": "4818",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/4818"
            },
            {
              "name": "40954",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/40954"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2007-4474",
    "datePublished": "2007-12-27T22:00:00",
    "dateReserved": "2007-08-22T00:00:00",
    "dateUpdated": "2024-08-07T14:53:55.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"44AA6D47-C1F7-463A-AED5-E3C253ADEF3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"179A1BBE-2FB2-449D-90B7-3DDD43794B58\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"377006EB-EF18-4B5F-93DE-A4B91F7B6AF1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A1C12C7A-C820-468D-B619-A75060B8562B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21D6D6BD-F80D-4EF3-9713-CBAB8CBD4CAC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2CFB784-67BA-4FDF-9F36-50895BB0CA10\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D062046-56EA-420F-8CF4-4CC1616F20DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"220211F3-8AF4-419E-BB10-0E954F002DFF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"95FC4EF7-9E76-4790-A35D-951CC3BA816F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23E58595-AE0A-47AB-AC49-61C6B87B5504\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F217AE30-EF90-4AED-815E-569AC29696ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B18ACE9-0DD2-486D-B034-B5598CDCA8AF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:6.5.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1BD8968A-6164-41CB-85C8-B3EDAFD3D83F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4854AD77-45A0-45AB-B9DA-77FFB7531C5A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:domino_web_access:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86A823BB-48B7-4F84-A01A-754987FDBD00\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F46CAB34-95D7-4728-B29E-FE766DF257F2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:lotus_domino_web_access:7.0.34.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"587CC055-433D-4086-B1E3-0A9DF12030A7\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples desbordamientos de b\\u00fafer basado en pila en el control ActiveX IBM Lotus Domino Web Access, proporcionado en inotes6.dll, inotes62.dll, dwa7.dll, y dwa7w.dll, en Domino 6.x y 7.x permiten a atacantes remotos ejecutar c\\u00f3digo de su elecci\\u00f3n, como se ha demostrado mediante un desbordamiento con un valor largo de la propiedad General_ServerName cuando se llama a la funci\\u00f3n InstallBrowserHelperDll del m\\u00f3dulo Upload en el control dwa7.dwa7.1 de dwa7w.dll 7.0.34.1.\"}]",
      "id": "CVE-2007-4474",
      "lastModified": "2024-11-21T00:35:40.977",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": true, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2007-12-27T22:46:00.000",
      "references": "[{\"url\": \"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html\", \"source\": \"cret@cert.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://osvdb.org/40954\", \"source\": \"cret@cert.org\"}, {\"url\": \"http://secunia.com/advisories/28184\", \"source\": \"cret@cert.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/963889\", \"source\": \"cret@cert.org\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.securityfocus.com/bid/26972\", \"source\": \"cret@cert.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.securitytracker.com/id?1019138\", \"source\": \"cret@cert.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/4296\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39175\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/4818\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/4820\", \"source\": \"cret@cert.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/5111\", \"source\": \"cret@cert.org\"}, {\"url\": \"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://osvdb.org/40954\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/28184\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/963889\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.securityfocus.com/bid/26972\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.securitytracker.com/id?1019138\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2007/4296\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39175\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/4818\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/4820\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/5111\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cret@cert.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-4474\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2007-12-27T22:46:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples desbordamientos de b\u00fafer basado en pila en el control ActiveX IBM Lotus Domino Web Access, proporcionado en inotes6.dll, inotes62.dll, dwa7.dll, y dwa7w.dll, en Domino 6.x y 7.x permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n, como se ha demostrado mediante un desbordamiento con un valor largo de la propiedad General_ServerName cuando se llama a la funci\u00f3n InstallBrowserHelperDll del m\u00f3dulo Upload en el control dwa7.dwa7.1 de dwa7w.dll 7.0.34.1.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":true,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44AA6D47-C1F7-463A-AED5-E3C253ADEF3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"179A1BBE-2FB2-449D-90B7-3DDD43794B58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"377006EB-EF18-4B5F-93DE-A4B91F7B6AF1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1C12C7A-C820-468D-B619-A75060B8562B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21D6D6BD-F80D-4EF3-9713-CBAB8CBD4CAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2CFB784-67BA-4FDF-9F36-50895BB0CA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D062046-56EA-420F-8CF4-4CC1616F20DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"220211F3-8AF4-419E-BB10-0E954F002DFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95FC4EF7-9E76-4790-A35D-951CC3BA816F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23E58595-AE0A-47AB-AC49-61C6B87B5504\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F217AE30-EF90-4AED-815E-569AC29696ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B18ACE9-0DD2-486D-B034-B5598CDCA8AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:6.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BD8968A-6164-41CB-85C8-B3EDAFD3D83F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4854AD77-45A0-45AB-B9DA-77FFB7531C5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:domino_web_access:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86A823BB-48B7-4F84-A01A-754987FDBD00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F46CAB34-95D7-4728-B29E-FE766DF257F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:lotus_domino_web_access:7.0.34.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"587CC055-433D-4086-B1E3-0A9DF12030A7\"}]}]}],\"references\":[{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://osvdb.org/40954\",\"source\":\"cret@cert.org\"},{\"url\":\"http://secunia.com/advisories/28184\",\"source\":\"cret@cert.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/963889\",\"source\":\"cret@cert.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.securityfocus.com/bid/26972\",\"source\":\"cret@cert.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.securitytracker.com/id?1019138\",\"source\":\"cret@cert.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/4296\",\"source\":\"cret@cert.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39175\",\"source\":\"cret@cert.org\"},{\"url\":\"https://www.exploit-db.com/exploits/4818\",\"source\":\"cret@cert.org\"},{\"url\":\"https://www.exploit-db.com/exploits/4820\",\"source\":\"cret@cert.org\"},{\"url\":\"https://www.exploit-db.com/exploits/5111\",\"source\":\"cret@cert.org\"},{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://osvdb.org/40954\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/28184\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/963889\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.securityfocus.com/bid/26972\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.securitytracker.com/id?1019138\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/4296\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39175\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/4818\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/4820\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/5111\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.