jetlib.sec

Feeds

133357 items (0 unread) in 27 feeds

61 items tagged "domino"

Related tags: exe component [+], initiative [+], bind request [+], site [+], service vulnerability [+], security [+], domino sametime [+], domino event [+], denial [+], black hat [+], pdf [+], domino server [+], domino icalendar [+], denial of service [+], code execution [+], lotus domino [+], zero day [+], tags [+], service [+], secunia [+], scripting [+], request packet [+], remote [+], mailto [+], mailbox account [+], imap services [+], falling [+], execution [+], domino authentication [+], cross [+], content [+], cid [+], bypass [+], buffer overflow vulnerability [+], authors [+], authentication [+], advisory [+], whitepaper [+], usa [+], slides [+], security advisory [+], scanner [+], reflected [+], multiple [+], lotus notes domino [+], lotus domino server [+], kevin mcpeake [+], dominos [+], cybsec [+], cross site scripting [+], criando [+], buffer [+], zero [+], lotus [+], day [+], wouter aukema [+], windows [+], target address [+], stack overflow [+], security 2001 [+], safer use [+], remote buffer overflow [+], part [+], paper [+], overflow vulnerability [+], nsfcomputeevaluateext [+], nldap [+], install [+], hat [+], hackproofing [+], domino web server [+], domino version [+], domino current [+], domino base [+], david litchfield [+], buffer overflow [+], black [+], asia [+], aldora louw [+], vulnerability [+], arbitrary code execution [+], stack buffer [+], ibm [+], code [+]

January 01, 2012
8:35
IBM Lotus Notes/Domino 8.5.2 FP3 Denial Of Service
» ‎ Packet Storm Security Recent Files

IBM Lotus Notes/Domino server suffers from a remote denial of service vulnerability that can be triggered by a malformed TCP packet. Versions 8.5.2 FP3 and earlier, 8.5.1, 8.5 and 8.0.x are affected.
Tags: lotus ibm denial domino lotus-notes-domino domino-server service-vulnerability

8:35
IBM Lotus Notes/Domino 8.5.2 FP3 Denial Of Service
» ‎ Packet Storm Security Misc. Files

IBM Lotus Notes/Domino server suffers from a remote denial of service vulnerability that can be triggered by a malformed TCP packet. Versions 8.5.2 FP3 and earlier, 8.5.1, 8.5 and 8.0.x are affected.
Tags: lotus ibm denial domino lotus-notes-domino domino-server service-vulnerability

December 22, 2011
0:52
Secunia Security Advisory 47331
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in IBM Lotus Domino, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security domino lotus-domino denial-of-service

November 30, 2011
15:58
IBM Lotus Domino Authentication Bypass
» ‎ Packet Storm Security Exploits

IBM Lotus Domino versions 8.5.3 and 8.5.2 FP3 suffer from an authentication bypass vulnerability.
Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

15:58
IBM Lotus Domino Authentication Bypass
» ‎ Packet Storm Security Recent Files

IBM Lotus Domino versions 8.5.3 and 8.5.2 FP3 suffer from an authentication bypass vulnerability.
Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

15:58
IBM Lotus Domino Authentication Bypass
» ‎ Packet Storm Security Misc. Files

IBM Lotus Domino versions 8.5.3 and 8.5.2 FP3 suffer from an authentication bypass vulnerability.
Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

November 09, 2011
21:51
[Slides] Falling Domino's
» ‎ SecDocs

Authors: Kevin McPeake Wouter Aukema
Tags: Domino
Event: Black Hat Windows Security 2001

Tags: authors falling tags wouter-aukema kevin-mcpeake domino-event domino security-2001 black-hat
November 06, 2011
21:29
[Slides] Falling Dominos
» ‎ SecDocs

Tags: Domino
Event: Black Hat Asia 2001

Tags: dominos falling tags domino-event asia black-hat domino slides

November 02, 2011
0:00
Vuln: IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability
Tags: nsfcomputeevaluateext lotus ibm domino buffer-overflow-vulnerability lotus-domino stack-buffer

November 01, 2011
22:52
[Slides] Falling Dominos Part III
» ‎ SecDocs

Authors: Kevin McPeake
Tags: Domino
Event: Black Hat USA 2001

Tags: part dominos falling kevin-mcpeake domino-event usa black-hat domino
October 31, 2011
22:48
[Paper] Hackproofing Lotus Domino
» ‎ SecDocs

Authors: David Litchfield
Tags: Domino
Event: Black Hat EU 2001

Tags: hackproofing lotus paper david-litchfield domino authors domino-event lotus-domino black-hat
October 06, 2011
23:12
[Slides] Notes on Domino
» ‎ SecDocs

Authors: Aldora Louw
Tags: Domino
Event: Black Hat USA 2003

Tags: hat black tags domino authors domino-event aldora-louw usa black-hat slides

July 19, 2011
14:33
Lotus Domino Denial Of Service
» ‎ Packet Storm Security Exploits

Lotus Domino version 8.5.3 suffers from a denial of service vulnerability when parsing malformed .ics files.
Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

14:33
Lotus Domino Denial Of Service
» ‎ Packet Storm Security Recent Files

Lotus Domino version 8.5.3 suffers from a denial of service vulnerability when parsing malformed .ics files.
Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

14:33
Lotus Domino Denial Of Service
» ‎ Packet Storm Security Misc. Files

Lotus Domino version 8.5.3 suffers from a denial of service vulnerability when parsing malformed .ics files.
Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

April 23, 2011
19:49
Lotus Domino Server diiop getEnvironmentString Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability lotus domino-server domino lotus-domino-server code-execution safer-use

April 06, 2011
0:00
Vuln: IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability
Tags: lotus ibm domino buffer-overflow-vulnerability lotus-domino stack-buffer

April 05, 2011
17:58
IBM Lotus Domino iCalendar MAILTO Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy() routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to trigger the vulnerable code path, a valid Domino mailbox account is needed.
Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

17:58
IBM Lotus Domino iCalendar MAILTO Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy() routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to trigger the vulnerable code path, a valid Domino mailbox account is needed.
Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

17:58
IBM Lotus Domino iCalendar MAILTO Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy() routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to trigger the vulnerable code path, a valid Domino mailbox account is needed.
Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

February 22, 2011
14:02
Domino Sametime 8.0.1 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Domino Sametime version 8.0.1 suffers from a cross site scripting vulnerability.
Tags: cross scripting site domino-sametime domino vulnerability

14:02
Domino Sametime 8.0.1 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Domino Sametime version 8.0.1 suffers from a cross site scripting vulnerability.
Tags: cross scripting site domino-sametime domino vulnerability

14:02
Domino Sametime 8.0.1 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Domino Sametime version 8.0.1 suffers from a cross site scripting vulnerability.
Tags: cross scripting site domino-sametime domino vulnerability

9:00
Bugtraq: Re: Domino Sametime Multiple Reflected Cross-Site Scripting
» ‎ SecurityFocus Vulnerabilities

Re: Domino Sametime Multiple Reflected Cross-Site Scripting
Tags: multiple reflected site domino-sametime domino
February 21, 2011
10:00
Bugtraq: Domino Sametime Multiple Reflected Cross-Site Scripting
» ‎ SecurityFocus Vulnerabilities

Domino Sametime Multiple Reflected Cross-Site Scripting
Tags: multiple reflected site domino-sametime domino

February 18, 2011
16:41
IBM Lotus Domino LDAP Remote Code Execution
» ‎ Packet Storm Security Exploits

IBM Lotus Domino LDAP bind request remote code execution exploit.
Tags: code remote execution domino lotus-domino bind-request code-execution

16:41
IBM Lotus Domino LDAP Remote Code Execution
» ‎ Packet Storm Security Recent Files

IBM Lotus Domino LDAP bind request remote code execution exploit.
Tags: code remote execution domino lotus-domino bind-request code-execution

16:41
IBM Lotus Domino LDAP Remote Code Execution
» ‎ Packet Storm Security Misc. Files

IBM Lotus Domino LDAP bind request remote code execution exploit.
Tags: code remote execution domino lotus-domino bind-request code-execution

0:00
Vuln: IBM Lotus Domino 'nLDAP.exe' Remote Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

IBM Lotus Domino 'nLDAP.exe' Remote Buffer Overflow Vulnerability
Tags: lotus nldap ibm domino buffer-overflow-vulnerability remote-buffer-overflow lotus-domino

February 09, 2011
1:16
Secunia Security Advisory 43247
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in IBM Lotus Domino, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security domino lotus-domino
February 07, 2011
18:24
Secunia Security Advisory 43208
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Some vulnerabilities have been reported in IBM Lotus Domino, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security domino lotus-domino
8:20
Zero Day Initiative Advisory 11-053
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-053 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP getEnvironmentString request the process blindly copies user supplied argument into an stack buffer while checking the local variable cache. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

8:20
Zero Day Initiative Advisory 11-053
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-053 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP getEnvironmentString request the process blindly copies user supplied argument into an stack buffer while checking the local variable cache. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

8:20
Zero Day Initiative Advisory 11-053
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-053 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP getEnvironmentString request the process blindly copies user supplied argument into an stack buffer while checking the local variable cache. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

8:10
Zero Day Initiative Advisory 11-052
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-052 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP client Request packet type the process can be made to mis-allocate a buffer size due to a signed-ness bug. Later, the process blindly copies user supplied data into this under allocated heap buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino exe-component request-packet

8:10
Zero Day Initiative Advisory 11-052
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-052 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP client Request packet type the process can be made to mis-allocate a buffer size due to a signed-ness bug. Later, the process blindly copies user supplied data into this under allocated heap buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino exe-component request-packet

8:10
Zero Day Initiative Advisory 11-052
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-052 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the ndiiop.exe component which listens by default on a dynamic TCP port. When handling a GIOP client Request packet type the process can be made to mis-allocate a buffer size due to a signed-ness bug. Later, the process blindly copies user supplied data into this under allocated heap buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino lotus-domino exe-component request-packet

7:01
Zero Day Initiative Advisory 11-049
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-049 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP service while processing a malformed e-mail. The process continually appends each argument within a filename parameter into a buffer in memory. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

7:01
Zero Day Initiative Advisory 11-049
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-049 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP service while processing a malformed e-mail. The process continually appends each argument within a filename parameter into a buffer in memory. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

7:01
Zero Day Initiative Advisory 11-049
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-049 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP service while processing a malformed e-mail. The process continually appends each argument within a filename parameter into a buffer in memory. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

6:32
Zero Day Initiative Advisory 11-048
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-048 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed calendar meeting request. The process copies the contents of the name parameter within the Content-Type header into a fixed size stack buffer. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

6:32
Zero Day Initiative Advisory 11-048
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-048 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed calendar meeting request. The process copies the contents of the name parameter within the Content-Type header into a fixed size stack buffer. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

6:32
Zero Day Initiative Advisory 11-048
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-048 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed calendar meeting request. The process copies the contents of the name parameter within the Content-Type header into a fixed size stack buffer. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

6:19
Zero Day Initiative Advisory 11-047
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-047 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the nLDAP.exe component which listens by default on TCP port 389. When handling the an LDAP Bind Request packet the process blindly copies user supplied data into an undersized shared memory buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino bind-request lotus-domino exe-component

6:19
Zero Day Initiative Advisory 11-047
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-047 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the nLDAP.exe component which listens by default on TCP port 389. When handling the an LDAP Bind Request packet the process blindly copies user supplied data into an undersized shared memory buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino bind-request lotus-domino exe-component

6:19
Zero Day Initiative Advisory 11-047
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-047 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the nLDAP.exe component which listens by default on TCP port 389. When handling the an LDAP Bind Request packet the process blindly copies user supplied data into an undersized shared memory buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability domino bind-request lotus-domino exe-component

6:12
Zero Day Initiative Advisory 11-046
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-046 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NRouter service while transporting malformed e-mails. The vulnerable code copies data from the ATTACH:CID and Content-ID headers within an e-mail into a fixed length stack buffer. By providing a large enough file name, this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

6:12
Zero Day Initiative Advisory 11-046
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-046 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NRouter service while transporting malformed e-mails. The vulnerable code copies data from the ATTACH:CID and Content-ID headers within an e-mail into a fixed length stack buffer. By providing a large enough file name, this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

6:12
Zero Day Initiative Advisory 11-046
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-046 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NRouter service while transporting malformed e-mails. The vulnerable code copies data from the ATTACH:CID and Content-ID headers within an e-mail into a fixed length stack buffer. By providing a large enough file name, this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

5:12
Zero Day Initiative Advisory 11-045
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-045 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The vulnerable code expands specific non-printable characters within a "mail from" command without allocating adequate space. By providing enough of these characters, memory can be corrupted leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

5:12
Zero Day Initiative Advisory 11-045
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-045 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The vulnerable code expands specific non-printable characters within a "mail from" command without allocating adequate space. By providing enough of these characters, memory can be corrupted leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

5:12
Zero Day Initiative Advisory 11-045
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-045 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The vulnerable code expands specific non-printable characters within a "mail from" command without allocating adequate space. By providing enough of these characters, memory can be corrupted leading to arbitrary code execution under the context of the SYSTEM user.
Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

November 04, 2010
17:33
IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: vulnerability lotus ibm domino-icalendar domino overflow-vulnerability stack-overflow lotus-domino

October 18, 2010
22:01
lotus-scanner.pdf
» ‎ Packet Storm Security Misc. Files

Whitepaper called Criando scanner para detector a falha Lotus Domino vulneravel ao exploit do Metasploit. Written in Portuguese.
Tags: criando pdf whitepaper domino lotus-domino lotus scanner

22:01
lotus-scanner.pdf
» ‎ Packet Storm Security Recent Files

Whitepaper called Criando scanner para detector a falha Lotus Domino vulneravel ao exploit do Metasploit. Written in Portuguese.
Tags: criando pdf whitepaper domino lotus-domino lotus scanner
September 14, 2010
21:01
ZDI-10-177.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-177 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed e-mail. The process copies the contents of the MAILTO header within a calendar request into a fixed size stack buffer. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: code vulnerability buffer domino arbitrary-code-execution lotus-domino stack-buffer

21:00
ZDI-10-177.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-177 - This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nrouter.exe service while processing a malformed e-mail. The process copies the contents of the MAILTO header within a calendar request into a fixed size stack buffer. By providing enough data this buffer can overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: code vulnerability buffer domino arbitrary-code-execution lotus-domino stack-buffer

8:41
IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow
Tags: lotus ibm domino lotus-domino stack-buffer buffer-overflow

May 05, 2010

Permalink for 'Metasploit Lotus Domino Version Scanner'

6:36

Metasploit Lotus Domino Version Scanner

» ‎ Carnal0wnage

I pushed out the first of a few Lotus Domino modules I've been working on to the metasploit trunk last nite.

The first one is a Lotus Domino Version Module.

There is no real "banner grabbing" for versions with Lotus Domino, old old versions "may" display the version in the server headers but I've never seen anything above 5.x do this. You usually get something like:

HTTP/1.0 200 OK
Server: Lotus-Domino
Date: Fri, 30 Apr 2010 00:19:11 GMT
Last-Modified: Wed, 07 Apr 2010 01:39:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5390
Cache-control: private
ETag: W/"MTAtODA4NS1DMTI1NzZENjAwMTVGRDhELTAtMA=="

for headers.

Useful enough to identify that its a Domino web server but not so much for using the couple of remote exploits out there that are very version and/or fixpack dependent.

There are a couple of files that the web server may serve up that have version information.

The first being iNotes/FormsX.nsf that usually has the version information as a comment in the html (this can be turned off) and the second being download/filesets/l_LOTUS_SCRIPT.inf
type files that has the base install version (at least as far as I can tell its the base install). *If thats not right please let me know*

So let's give it a test drive...

msf > use auxiliary/scanner/lotus/lotus_domino_version
msf auxiliary(lotus_domino_version) > info

      Name: Lotus Domino Version
   Version: $Revision$
   License: Metasploit Framework License (BSD)
      Rank: Normal

Provided by:
 CG

Basic options:
 Name     Current Setting  Required  Description
 ----     ---------------  --------  -----------
 PATH     /                yes       path
 Proxies                   no        Use a proxy chain
 RHOSTS                    yes       The target address range or CIDR identifier
 RPORT    80               yes       The target port
 THREADS  1                yes       The number of concurrent threads
 VHOST                     no        HTTP server virtual host

Description:
 Checks to determine Lotus Domino Server Version.

msf auxiliary(lotus_domino_version) > set RHOSTS file:/home/user/shodan-domino.txt
RHOSTS => file:/home/user/shodan-domino.txt
msf auxiliary(lotus_domino_version) > run

[*] 192.168.245.101:80 Lotus Domino Current Version: 6.5.4 (Windows NT/Intel)
[*] 192.168.245.101:80 Lotus Domino Base Install Version: 6.0.5.50
[*] 192.168.245.101:80 Lotus Domino Base Install Version: 6.0.5.50
[*] 192.168.245.101:80 Lotus Domino Base Install Version: 6.0.5.50
[*] 192.168.245.101:80 Lotus Domino Base Install Version: 6.0.5.50
[*] 192.168.80.132:80 Lotus Domino Current Version: 6.5.5 (Solaris Sparc)
[*] 192.168.80.132:80 Lotus Domino Base Install Version: 6.0.4
[*] 192.168.80.132:80 Lotus Domino Base Install Version: 6.0.4
[-] no response for 192.168.80.132:80 download/filesets/l_SEARCH.inf
[*] 192.168.80.132:80 Lotus Domino Base Install Version: 6.0.4
[*] Scanned 02 of 20 hosts (010% complete)
[*] 192.168.220.33:80 Lotus Domino Current Version: 8.0.2 HF1190 (Windows NT/Intel)
[*] 192.168.220.33:80 Lotus Domino Current Version: 8.0.2 HF1190 (Windows NT/Intel)
[*] 192.168.220.33:80 Lotus Domino Base Install Version: 8.0.1.0
[*] 192.168.220.33:80 Lotus Domino Base Install Version: 8.0.1.0
[*] 192.168.220.33:80 Lotus Domino Base Install Version: 8.0.1.0
[*] 192.168.220.33:80 Lotus Domino Base Install Version: 8.0.1.0
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/iNotes/Forms5.nsf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/iNotes/Forms6.nsf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/iNotes/Forms7.nsf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/download/filesets/l_LOTUS_SCRIPT.inf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/download/filesets/n_LOTUS_SCRIPT.inf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/download/filesets/l_SEARCH.inf
[-] 192.168.152.68:80 302 Redirect to https://192.168.152.68/download/filesets/n_SEARCH.inf
[*] Scanned 04 of 20 hosts (020% complete)
[*] 192.168.166.33:80 Lotus Domino Current Version: 7.0.1 (Windows NT/Intel)
[*] 192.168.166.33:80 Lotus Domino Current Version: 7.0.1 (Windows NT/Intel)
[*] 192.168.166.33:80 Lotus Domino Base Install Version: 7.0.1.0
[*] 192.168.166.33:80 Lotus Domino Base Install Version: 7.0.1.0
[*] 192.168.166.33:80 Lotus Domino Base Install Version: 7.0.1.0
[*] 192.168.166.33:80 Lotus Domino Base Install Version: 7.0.1.0
[*] Scanned 06 of 20 hosts (030% complete)
[*] 192.168.33.93:80 Lotus Domino Current Version: 7.0.2 (Windows NT/Intel)
[*] 192.168.33.93:80 Lotus Domino Current Version: 7.0.2 (Windows NT/Intel)
[*] 192.168.33.93:80 Lotus Domino Base Install Version: 7.0.2.0
[*] 192.168.33.93:80 Lotus Domino Base Install Version: 7.0.2.0
[*] 192.168.33.93:80 Lotus Domino Base Install Version: 7.0.2.0
[*] 192.168.33.93:80 Lotus Domino Base Install Version: 7.0.2.0
[*] 192.168.246.154:80 Lotus Domino Current Version: 7.0.3FP1 (Windows NT/Intel)
[*] 192.168.246.154:80 Lotus Domino Current Version: 7.0.3FP1 (Windows NT/Intel)
[*] 192.168.246.154:80 Lotus Domino Base Install Version: 7.0.3.0
[*] 192.168.246.154:80 Lotus Domino Base Install Version: 7.0.3.0
[*] 192.168.246.154:80 Lotus Domino Base Install Version: 7.0.3.0
[*] 192.168.246.154:80 Lotus Domino Base Install Version: 7.0.3.0
...

Tags: lotus install windows domino-version domino-current domino-server domino domino-base lotus-domino-server domino-web-server target-address

March 02, 2010
19:00
domino-xss.pdf
» ‎ Packet Storm Security Recent Files

CYBSEC Security Advisory - The help section in IBM Lotus Domino version 7.0.2 suffers from a reflected cross site scripting vulnerability.
Tags: cybsec pdf security domino lotus-domino cross-site-scripting security-advisory

19:00
domino-xss.pdf
» ‎ Packet Storm Security Exploits

CYBSEC Security Advisory - The help section in IBM Lotus Domino version 7.0.2 suffers from a reflected cross site scripting vulnerability.
Tags: cybsec pdf security domino lotus-domino cross-site-scripting security-advisory

TOP RSS Atom Tentatively valid XHTML1.0, CSS2.0 Last Update: Fri 25 May 2012 10:09:40 AM PDT Jetlib

jetlib.sec » Tags » domino

Feeds

61 items tagged "domino"

Tags: lotus ibm denial domino lotus-notes-domino domino-server service-vulnerability

Tags: lotus ibm denial domino lotus-notes-domino domino-server service-vulnerability

Tags: advisory secunia security domino lotus-domino denial-of-service

Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

Tags: lotus ibm bypass domino-authentication domino lotus-domino authentication vulnerability

Tags: authors falling tags wouter-aukema kevin-mcpeake domino-event domino security-2001 black-hat

Tags: dominos falling tags domino-event asia black-hat domino slides

Tags: nsfcomputeevaluateext lotus ibm domino buffer-overflow-vulnerability lotus-domino stack-buffer

Tags: part dominos falling kevin-mcpeake domino-event usa black-hat domino

Tags: hackproofing lotus paper david-litchfield domino authors domino-event lotus-domino black-hat

Tags: hat black tags domino authors domino-event aldora-louw usa black-hat slides

Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

Tags: lotus denial service domino lotus-domino service-vulnerability denial-of-service

Tags: code vulnerability lotus domino-server domino lotus-domino-server code-execution safer-use

Tags: lotus ibm domino buffer-overflow-vulnerability lotus-domino stack-buffer

Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

Tags: lotus ibm mailto domino-icalendar domino arbitrary-code-execution lotus-domino mailbox-account

Tags: cross scripting site domino-sametime domino vulnerability

Tags: cross scripting site domino-sametime domino vulnerability

Tags: cross scripting site domino-sametime domino vulnerability

Tags: multiple reflected site domino-sametime domino

Tags: multiple reflected site domino-sametime domino

Tags: code remote execution domino lotus-domino bind-request code-execution

Tags: code remote execution domino lotus-domino bind-request code-execution

Tags: code remote execution domino lotus-domino bind-request code-execution

Tags: lotus nldap ibm domino buffer-overflow-vulnerability remote-buffer-overflow lotus-domino

Tags: advisory secunia security domino lotus-domino

Tags: advisory secunia security domino lotus-domino

Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

Tags: day zero vulnerability domino lotus-domino stack-buffer exe-component

Tags: day zero vulnerability domino lotus-domino exe-component request-packet

Tags: day zero vulnerability domino lotus-domino exe-component request-packet

Tags: day zero vulnerability domino lotus-domino exe-component request-packet

Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

Tags: day zero initiative domino arbitrary-code-execution lotus-domino zero-day

Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero initiative domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero vulnerability domino bind-request lotus-domino exe-component

Tags: day zero vulnerability domino bind-request lotus-domino exe-component

Tags: day zero vulnerability domino bind-request lotus-domino exe-component

Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero code cid content- domino arbitrary-code-execution lotus-domino stack-buffer

Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

Tags: day zero code domino arbitrary-code-execution imap-services lotus-domino

Tags: vulnerability lotus ibm domino-icalendar domino overflow-vulnerability stack-overflow lotus-domino

Tags: criando pdf whitepaper domino lotus-domino lotus scanner

Tags: criando pdf whitepaper domino lotus-domino lotus scanner

Tags: code vulnerability buffer domino arbitrary-code-execution lotus-domino stack-buffer

Tags: code vulnerability buffer domino arbitrary-code-execution lotus-domino stack-buffer

Tags: lotus ibm domino lotus-domino stack-buffer buffer-overflow

Tags: lotus install windows domino-version domino-current domino-server domino domino-base lotus-domino-server domino-web-server target-address

Tags: cybsec pdf security domino lotus-domino cross-site-scripting security-advisory

Tags: cybsec pdf security domino lotus-domino cross-site-scripting security-advisory