Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-0977
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-0977

Description:
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.

CVE Status:
Candidate

References:

OSVDB
  35764

MILW0RM
  http://www.milw0rm.com/exploits/3302


Return to the previous page.