CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.

Link	Resource
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-013.txt
http://www-1.ibm.com/support/docview.wss?uid=swg21257030	Patch
http://www.securityfocus.com/bid/26146
http://secunia.com/advisories/27321	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2007/3598

Configuration 1

cpe:2.3:a:ibm:lotus_notes:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*

---

Published : 2007-10-29 09:46

Updated : 2011-03-08 03:00

---

NVD link : CVE-2007-5544

Mitre link : CVE-2007-5544

No products.

CWE-732