Secunia

l0om has reported a security issue in Lotus Notes for Linux, which can be exploited by malicious, local users to manipulate information in a configuration file.

The configuration file "notesdata/notes.ini" is by default installed with "666" permissions granting anyone read and write privileges. This can be exploited to manipulate critical configuration parameters.

The problem has been reported in version 6.0.2. Other versions may also be affected.

Solution
Set proper permissions on the configuration file.

Provided and/or discovered by
l0om

Original Advisory
http://www.excluded.org/advisories/advisory05.txt

Deep Links
Links available in Customer Area