SMTP: Lotus Notes notes.ini Redirection
This signature detects URL links to an external notes.ini file (the configuration file for a Lotus Notes client). Lotus Notes Domino Server versions 6.0.x and 6.5.x are vulnerable. Because a Lotus Notes client enables users to specify a configuration file, attackers can entice potential targets to use a malicious file provided in a Web page or e-mail message.
Extended Description
A vulnerability is reported to affect the way Lotus Notes URIs are handled. The vulnerability exists due to a lack of sufficient input validation performed on Lotus Notes URIs. By controlling influencing notes.ini content, it is possible for a remote attacker to execute arbitrary code. Code execution will occur in the context of the user who is running the vulnerable instance of Lotus Notes. It should be noted that this issue is not present in Lotus Notes R5 or 4.6x.
Affected Products
Ibm lotus_notes
Short Name
SMTP:MAL:NOTES-INI-SMTP
Severity
Minor
Recommended
False
Recommended Action
None
Category
SMTP
Keywords
CVE-2004-0480 Lotus Notes Redirection bid:10600 notes.ini
Release Date
07/01/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Ibm
CVSS Score
10.0