OSVDB ID: 15367 Title: IBM Lotus Notes Client NOTES.INI Processing Local Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
The Lotus Notes client contains a flaw that may allow a local denial of service. The issue is caused by an overflow condition triggered from processing the notes.ini configuration file, and may result in loss of availability. The issue can only be triggered by an attacker with local access to notes.ini and used to create a denial of service condition. |
Classification |
Location:
Local Access Required
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Availability Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Upgrade to version 6.5.4 or 6.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
symantec.com - Symantec Corp.