CVE-2005-2428 Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain...
MediumCVSS 5.0
EPSS 73.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 5.0 | No fix listed |
| ibm lotus domino | = 6.0 | No fix listed |
| ibm lotus domino | = 6.5 | No fix listed |
References
- 20050726 CYBSEC - Security Advisory: Default Configuration Information mailing-list
- 16231 third-party-advisory vendor-advisory
- 1014584 vdb-entry
- www-1.ibm.com vendor-advisory
- www.cybsec.com vendor-advisory
- 18462 vdb-entry
- www.securiteam.com
- 14389 vdb-entry
- lotus-domino-names-obtain-information(21556) vdb-entry
- 39495 exploit