CVE-2013-4068

Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8.

CVSS v2.0 7.1 HIGH

7.1^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:S/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21649476	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21650034	Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21650146	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/86599

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:lotus_domino:8.5.3.0:::::::*
	cpe:2.3:a:ibm:lotus_domino:8.5.3.1:::::::*
	cpe:2.3:a:ibm:lotus_domino:8.5.3.2:::::::*
	cpe:2.3:a:ibm:lotus_domino:8.5.3.3:::::::*
	cpe:2.3:a:ibm:lotus_domino:8.5.3.4:::::::*
	cpe:2.3:a:ibm:lotus_domino:9.0.0.0:::::::*
	cpe:2.3:a:ibm:lotus_inotes:-:::::::*

History

No history.

Information

Published : 2013-09-20 15:26

Updated : 2023-12-10 11:16

NVD link : CVE-2013-4068

Mitre link : CVE-2013-4068

CVE.ORG link : CVE-2013-4068

JSON object : View

Products Affected

ibm

lotus_inotes
lotus_domino

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2013-4068", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-20T15:26:03.857", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21649476", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21650034", "tags": ["Patch"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21650146", "tags": ["Patch"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86599", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8."}, {"lang": "es", "value": "Desbordamiento de buffer en iNotes en IBM Domino 8.5.3 anterior a FP5 IF1 y 9.0 anterior a IF4 permite a los usuarios remotos autenticados ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, tambi\u00e9n conocido como SPR PTHN9ADPA8."}], "lastModified": "2017-08-29T01:33:35.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "350ACC22-669F-4429-A525-36F56EF9678C"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C068055-FB7A-4AFB-AF29-28238ECF126F"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ACB4B2C-CCE1-4A0A-B962-B8C208869589"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:8.5.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC1A8676-B2CA-49FF-A43E-EAC62170BF82"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:8.5.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71ADC0C5-36E9-426E-B302-56804B1800BB"}, {"criteria": "cpe:2.3:a:ibm:lotus_domino:9.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7025B610-6988-4A78-B0ED-6FB728AA6C28"}, {"criteria": "cpe:2.3:a:ibm:lotus_inotes:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADBAA800-3F74-45C5-AE58-EF76A35186D0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}