NetSight
medium5.0

CVE-2006-0120

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via mul…

Impact

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN).

Affected products

VendorProductAffected versions
IbmLotus Domino
Versions 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4
IbmLotus Domino Enterprise Server
Versions 6.5.2, 6.5.4
IbmLotus Notes
Versions 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4

References