high7.1Public exploit code
CVE-2007-0977
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readv…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Lotus Domino R6 Webmail - Remote Password Hash Dumper2007-02-13 · remote · windows · Verified
Impact
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Domino | Versions 5.0, 6.0 |