Lucene search
MitreCVE-2011-0912HistoryFeb 08, 2011 - 10:00 p.m.
CVE-2011-0912
2011-02-0822:00:02
CWE-20
mitre
web.nvd.nist.gov
30
cve
ibm
lotus notes
vulnerability
remote code execution
spr prad82yjw2
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.11
Percentile
95.2%
Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.
Affected configurations
Node
ibmlotus_notesMatch8.0
ORibmlotus_notesMatch8.0.1
ORibmlotus_notesMatch8.0.2
ORibmlotus_notesMatch8.0.2.0
ORibmlotus_notesMatch8.0.2.1
ORibmlotus_notesMatch8.0.2.2
ORibmlotus_notesMatch8.0.2.3
ORibmlotus_notesMatch8.0.2.4
ORibmlotus_notesMatch8.0.2.5
Node
ibmlotus_notesMatch8.5.0.0
ORibmlotus_notesMatch8.5.0.1
ORibmlotus_notesMatch8.5.1.0
ORibmlotus_notesMatch8.5.1.1
ORibmlotus_notesMatch8.5.1.2
ORibmlotus_notesMatch8.5.1.3
ORibmlotus_notesMatch8.5.1.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lotus_notes | 8.0 | cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.1 | cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2 | cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.0 | cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.1 | cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.2 | cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.3 | cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.4 | cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.0.2.5 | cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:* |
| ibm | lotus_notes | 8.5.0.0 | cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:* |
Related
openvas
openvas
zdi
zdi
(0Day) IBM Lotus Notes cai URI Handler Remote Code Execution Vulnerability
2011-02-07 00:00:00
prion
prion
Design/Logic Flaw
2011-02-08 22:00:00
nvd
nvd
CVE-2011-0912
2011-02-08 22:00:02
cvelist
cvelist
CVE-2011-0912
2011-02-08 21:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.11
Percentile
95.2%
Related for CVE-2011-0912