Technical Description

Multiple vulnerabilities have been identified in IBM Lotus Domino, which could be exploited by attackers to disclose sensitive information, bypass security restrictions, cause a denial of service, or take complete control of an affected system.

The first issue is caused by insecure permissions being set on the shared memory created by the application, which could allow malicious users to disclose sensitive information.

The second vulnerability is caused by an error in the Certificate Authority (CA) process commands when using uppercase characters with either the CA "activate" or "unlock" commands, which could result in the password being displayed in clear text.

The third issue is caused by a buffer overflow error in the IMAP service when processing malformed data, which could be exploited by authenticated attackers to execute arbitrary code.

The fourth vulnerability is caused by an error when using the Evaluate LotusScript method in conjunction with specific @ formula commands to design views and agents, which could cause the view or agent to return information of which the user normally would not be able to access.

Affected Products

IBM Lotus Domino versions prior to 8.0
IBM Lotus Domino versions prior to 7.0.3

Solution

Upgrade to IBM Lotus Domino version 7.0.3 or 8.0 :
http://www.ibm.com/software/lotus/support/upgradecentral/index.html

References

http://www.vupen.com/english/advisories/2007/3598
http://www-1.ibm.com/support/docview.wss?uid=swg21257030
http://www-1.ibm.com/support/docview.wss?uid=swg21261095
http://www-1.ibm.com/support/docview.wss?uid=swg21270623
http://www-1.ibm.com/support/docview.wss?uid=swg21273266

Credits

Vulnerabilities reported by Ollie Whitehouse (Symantec), Michael Gollmick (TIMETOACT Software and Consulting), Daniel Nashed (Nash!Com) and VeriSign iDefense Labs.

ChangeLog

2007-10-24 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.