漏洞类别：Local
漏洞等级： 
漏洞信息
IBM Lotus Domino is a client/server product designed for collaborative working environments.Domino Server supports email, scheduling, instant messaging and data-driven applications.
IBM Domino contains a cross-site scripting and two image parsing buffer overflow vulnerabilities. Affected Versions:
IBM Domino 9.0.1 Fix Pack 3 (plus Interim Fixes) and earlier IBM Domino 8.5.3 Fix Pack 6 (plus Interim Fixes) and earlier All 9.0 and 8.5.x releases of IBM Domino prior to those listed above.
漏洞危害
Successful exploitation of this vulnerability will allow an attacker to execute arbitrary code, failed exploits may result in denial of service.
解决方案
Users are advised to install the patches provided by IBM. Further more information can be obtained from IBM Advisory
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论