CVE-2004-0480 Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate note...
HighCVSS 10.0
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus notes | = 6.0.3 | No fix listed |
| ibm lotus notes | = 6.5 | No fix listed |
References
- 20040627 Lotus Notes URL argument injection vulnerability mailing-list third-party-advisory
- www-1.ibm.com broken-link patch vendor-advisory
- www.idefense.com broken-link exploit patch vendor-advisory
- 10600 broken-link patch third-party-advisory vdb-entry vendor-advisory
- lotus-notes-xss(16496) third-party-advisory vdb-entry