Lotus Notes lädt Code von fremden Systemen nach
by Volker Weber
Durch eine Sicherheitslücke in IBMs Groupware-Lösung Lotus Notes können Angreifer unter bestimmten Umständen verwundbaren Clients dazu bringen, beliebigen Code über das Netzwerk zu laden und auszuführen. Dazu genügt es, ein manipuliertes HTML-Dokument zu öffnen. Die Schwachstelle ist in den Versionen 6.0.3 und 6.5 zu finden. IBM hat dazu ein Advisory veröffentlicht und weist darauf hin, dass der Fehler in 6.0.4 and 6.5.2 behoben ist.
Comments
Aber der viel spannendere Link ist doch der: http://www.heise.de/security/news/foren/go.shtml?list=1&forum_id=59201 :-)
Ach was, das ist doch immer das selbe. :-)
Post a comment
Recent comments
Ben Poole
on It has only been less than two hours at 09:44
Frank L. Quednau
on It has only been less than two hours at 09:29
Martin Hiegl
on It has only been less than two hours at 08:27
Stephan H. Wissel
on Notes.ini parameter RunFaster=1 is finally here at 05:24
Volker Weber
on It has only been less than two hours at 01:33
Thomas "Duffbert" Duff
on It has only been less than two hours at 01:26
Chris Linfoot
on Planet Lotus not picking up Christopher's feed at 21:56
Yancy Lent
on Planet Lotus not picking up Christopher's feed at 19:48
Bruce Elgort
on Robin Bloor: Why Google Chrome Will Dominate at 18:51
Mac Guidera
on Planet Lotus not picking up Christopher's feed at 16:04
Kevan Emmott
on 824 Chrome users so far today at 15:56
Chris Linfoot
on Planet Lotus not picking up Christopher's feed at 14:54
Lars Berntrop-Bos
on Planet Lotus not picking up Christopher's feed at 13:12
Andreas Braukmann
on 824 Chrome users so far today at 11:33
Nick Daisley
on Robin Bloor: Why Google Chrome Will Dominate at 10:14
Chris Linfoot
on Planet Lotus not picking up Christopher's feed at 09:42
Alper Iseri
on 824 Chrome users so far today at 09:38
Jean Pierre Wenzel
on 824 Chrome users so far today at 08:37
Jan-Piet Mens
on Robin Bloor: Why Google Chrome Will Dominate at 08:26
Benjamin Stein
on Synchronizing iPhone with ... Lotus Notes at 07:18
Greg Walrath
on Party like it's 2008 at 06:56
Andy Brunner
on Party like it's 2008 at 05:41
Michelle O'Rorke
on Synchronizing iPhone with ... Lotus Notes at 05:01
Arthur Fontaine
on Chrome in the wild at 03:26
Yancy Lent
on Planet Lotus not picking up Christopher's feed at 02:15
Click here to subscribe
