Search
Find a vulnerability
Search criteria
4 vulnerabilities found for lotus_domino_web_access by ibm
CVE-2007-4474 (GCVE-0-2007-4474)
Vulnerability from nvd – Published: 2007-12-27 22:00 – Updated: 2024-08-07 14:53
VLAI
Summary
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.securitytracker.com/id?1019138 | vdb-entryx_refsource_SECTRACK |
| https://www.exploit-db.com/exploits/5111 | exploitx_refsource_EXPLOIT-DB |
| http://www.securityfocus.com/bid/26972 | vdb-entryx_refsource_BID |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://www.exploit-db.com/exploits/4820 | exploitx_refsource_EXPLOIT-DB |
| http://www.kb.cert.org/vuls/id/963889 | third-party-advisoryx_refsource_CERT-VN |
| http://www.vupen.com/english/advisories/2007/4296 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/28184 | third-party-advisoryx_refsource_SECUNIA |
| https://www.exploit-db.com/exploits/4818 | exploitx_refsource_EXPLOIT-DB |
| http://osvdb.org/40954 | vdb-entryx_refsource_OSVDB |
Date Public
2007-12-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:53:55.977Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1019138",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/40954"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"name": "1019138",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/40954"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2007-4474",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1019138",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"refsource": "OSVDB",
"url": "http://osvdb.org/40954"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2007-4474",
"datePublished": "2007-12-27T22:00:00.000Z",
"dateReserved": "2007-08-22T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:53:55.977Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-4763 (GCVE-0-2006-4763)
Vulnerability from nvd – Published: 2006-09-13 23:00 – Updated: 2024-08-07 19:23
VLAI
Summary
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/445821/100… | mailing-listx_refsource_BUGTRAQ |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| http://www.fishnetsecurity.com/csirt/disclosure/ibm | x_refsource_MISC |
| http://www.securityfocus.com/bid/19966 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/1571 | third-party-advisoryx_refsource_SREASON |
| http://www-1.ibm.com/support/docview.wss?rs=463&u… | x_refsource_CONFIRM |
Date Public
2006-09-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:23:41.067Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "domino-token-session-hijack(28881)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1571"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-09-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client\u0027s Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user\u0027s privileges by intercepting the LtpaToken cookie."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "domino-token-session-hijack(28881)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1571"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4763",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client\u0027s Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user\u0027s privileges by intercepting the LtpaToken cookie."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "domino-token-session-hijack(28881)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"name": "http://www.fishnetsecurity.com/csirt/disclosure/ibm",
"refsource": "MISC",
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1571"
},
{
"name": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589",
"refsource": "CONFIRM",
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4763",
"datePublished": "2006-09-13T23:00:00.000Z",
"dateReserved": "2006-09-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:23:41.067Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-4474 (GCVE-0-2007-4474)
Vulnerability from cvelistv5 – Published: 2007-12-27 22:00 – Updated: 2024-08-07 14:53
VLAI
Summary
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.securitytracker.com/id?1019138 | vdb-entryx_refsource_SECTRACK |
| https://www.exploit-db.com/exploits/5111 | exploitx_refsource_EXPLOIT-DB |
| http://www.securityfocus.com/bid/26972 | vdb-entryx_refsource_BID |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://www.exploit-db.com/exploits/4820 | exploitx_refsource_EXPLOIT-DB |
| http://www.kb.cert.org/vuls/id/963889 | third-party-advisoryx_refsource_CERT-VN |
| http://www.vupen.com/english/advisories/2007/4296 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/28184 | third-party-advisoryx_refsource_SECUNIA |
| https://www.exploit-db.com/exploits/4818 | exploitx_refsource_EXPLOIT-DB |
| http://osvdb.org/40954 | vdb-entryx_refsource_OSVDB |
Date Public
2007-12-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:53:55.977Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1019138",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/40954"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"name": "1019138",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/40954"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2007-4474",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1019138",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1019138"
},
{
"name": "5111",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/5111"
},
{
"name": "26972",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26972"
},
{
"name": "20071220 IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html"
},
{
"name": "domino-dwa7w-bo(39175)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39175"
},
{
"name": "4820",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4820"
},
{
"name": "VU#963889",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/963889"
},
{
"name": "ADV-2007-4296",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4296"
},
{
"name": "28184",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28184"
},
{
"name": "4818",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4818"
},
{
"name": "40954",
"refsource": "OSVDB",
"url": "http://osvdb.org/40954"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2007-4474",
"datePublished": "2007-12-27T22:00:00.000Z",
"dateReserved": "2007-08-22T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:53:55.977Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-4763 (GCVE-0-2006-4763)
Vulnerability from cvelistv5 – Published: 2006-09-13 23:00 – Updated: 2024-08-07 19:23
VLAI
Summary
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/445821/100… | mailing-listx_refsource_BUGTRAQ |
| http://lists.grok.org.uk/pipermail/full-disclosur… | mailing-listx_refsource_FULLDISC |
| http://www.fishnetsecurity.com/csirt/disclosure/ibm | x_refsource_MISC |
| http://www.securityfocus.com/bid/19966 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/1571 | third-party-advisoryx_refsource_SREASON |
| http://www-1.ibm.com/support/docview.wss?rs=463&u… | x_refsource_CONFIRM |
Date Public
2006-09-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:23:41.067Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "domino-token-session-hijack(28881)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1571"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-09-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client\u0027s Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user\u0027s privileges by intercepting the LtpaToken cookie."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "domino-token-session-hijack(28881)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1571"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-4763",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client\u0027s Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user\u0027s privileges by intercepting the LtpaToken cookie."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "domino-token-session-hijack(28881)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28881"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/445821/100/0/threaded"
},
{
"name": "20060912 Session Token Remains Valid After Logout in IBM Lotus Domino Web Access",
"refsource": "FULLDISC",
"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html"
},
{
"name": "http://www.fishnetsecurity.com/csirt/disclosure/ibm",
"refsource": "MISC",
"url": "http://www.fishnetsecurity.com/csirt/disclosure/ibm"
},
{
"name": "19966",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19966"
},
{
"name": "1571",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1571"
},
{
"name": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589",
"refsource": "CONFIRM",
"url": "http://www-1.ibm.com/support/docview.wss?rs=463\u0026uid=swg21245589"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-4763",
"datePublished": "2006-09-13T23:00:00.000Z",
"dateReserved": "2006-09-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:23:41.067Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}