CVE-2018-1771 IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687.
HighCVSS 7.8
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm domino | >= 9.0.1.0, <= 9.0.1.10 | No fix listed |
| ibm domino | = 9.0.0.0-if1 | No fix listed |
| ibm domino | = 9.0.0.0-if2 | No fix listed |
| ibm domino | = 9.0.0.0-if3 | No fix listed |
| ibm domino | = 9.0.0.0-if4 | No fix listed |
| ibm domino | = 9.0.1.10-if1 | No fix listed |
| ibm domino | = 9.0.1.10-if2 | No fix listed |
| ibm domino | = 9.0.1.10-if3 | No fix listed |
| ibm domino | = 9.0.1.10-if4 | No fix listed |
| ibm notes | >= 9.0.1.0, <= 9.0.1.10 | No fix listed |
| ibm notes | = 9.0.0.0-if1 | No fix listed |
| ibm notes | = 9.0.0.0-if2 | No fix listed |
| ibm notes | = 9.0.0.0-if3 | No fix listed |
| ibm notes | = 9.0.0.0-if4 | No fix listed |
| ibm notes | = 9.0.1.10-if1 | No fix listed |
| ibm notes | = 9.0.1.10-if2 | No fix listed |
| ibm notes | = 9.0.1.10-if3 | No fix listed |
| ibm notes | = 9.0.1.10-if4 | No fix listed |
| ibm notes | = 9.0.1.10-if5 | No fix listed |
| ibm domino | = 9.0.1 | No fix listed |
| ibm domino | = 9.0 | No fix listed |
References
- ibm-notes-cve20181771-priv-escalation(148687) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory