NetSight
IP …
medium4.0

CVE-2009-5033

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "* *" argument sequence for a certain tell command, which allows remote authenticated users …

Impact

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "* *" argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread.

Affected products

VendorProductAffected versions
IbmLotus Notes Traveler
through 8.5.0.1
Versions 8.0, 8.0.1, 8.0.1.2, 8.0.1.3, 8.5.0.0

Weakness classification

CWE-200

References