NetSight
IP …
high7.8

CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for me…

Impact

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.

Affected products

VendorProductAffected versions
IbmLotus Domino
before 6.5.5
from 7.0 before 7.0.2
Versions 6.5.5, 7.0.2
IbmLotus Notes
through 6.5.5
from 7.0.0 before 7.0.3

Weakness classification

CWE-732

References