Lucene search

MitreCVE-2008-1217

HistoryMar 09, 2008 - 2:44 a.m.

CVE-2008-1217

2008-03-0902:44:00

CWE-94

mitre

web.nvd.nist.gov

cve-2008-1217

ibm

lotus notes

nlnotes.dll

remote code execution

crafted attachment

smtp

cve-2007-6706

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.087

Percentile

94.6%

JSON

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706.

Affected configurations

Nvd

Node

ibmlotus_notesMatch6.5

ibmlotus_notesMatch7.0.2

ibmlotus_notesMatch8.0.0

VendorProductVersionCPE
ibmlotus_notes6.5cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*
ibmlotus_notes7.0.2cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*
ibmlotus_notes8.0.0cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_notes	6.5	cpe:2.3:a:ibm:lotus_notes:6.5:::::::*
ibm	lotus_notes	7.0.2	cpe:2.3:a:ibm:lotus_notes:7.0.2:::::::*
ibm	lotus_notes	8.0.0	cpe:2.3:a:ibm:lotus_notes:8.0.0:::::::*

References

securitytracker.com/id?1019464

www-1.ibm.com/support/docview.wss?uid=swg21271957

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.087

Percentile

94.6%

JSON

Related for CVE-2008-1217