Two vulnerabilities have been discovered in Lotus Notes and Lotus Domino, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system.

1) An unspecified input validation error can reportedly be exploited to conduct cross-site scripting attacks against users.

2) An input validation error within the Notes URI handler can be exploited to execute arbitrary code on a user's system by making a Notes client use a remote, custom configuration file ("notes.ini") via a UNC path. The configuration will in turn specify a remote data directory containing malicious DLL files, which will be loaded.

Successful exploitation requires that a user is tricked into viewing a malicious HTML document or follow a specially crafted link.

Solution
The vendor reports that the vulnerabilities have been resolved in versions 6.0.4 and 6.5.2.

Provided and/or discovered by
1) Reported by vendor.
2) Jouko Pynnonen

Original Advisory
IBM - Cross-site Scripting Vulnerability Addressed in 6.0.4 and 6.5.2:
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21171253

IBM - Lotus Notes URL Handler Argument Injection Vulnerability:
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21169510

iDEFENSE:
http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities

Deep Links
Links available in Customer Area