CVE

Id
10049  
CVE No.
CVE-2004-1621  
Status
Candidate  
Description
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68957 10049 CVE-2004-1621 BUGTRAQ:20041018 IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] )  View
68958 10049 CVE-2004-1621 URL:http://marc.info/?l=bugtraq&m=109812960023736&w=2  View
68959 10049 CVE-2004-1621 BUGTRAQ:20041021 Re: IBM Lotus Notes/Domino fails to encode Square Brackets ( [ ] )  View
68960 10049 CVE-2004-1621 URL:http://marc.info/?l=bugtraq&m=109841682529328&w=2  View
68961 10049 CVE-2004-1621 MISC:http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21187833  View
68962 10049 CVE-2004-1621 CERT-VN:VU#404382  View
68963 10049 CVE-2004-1621 URL:http://www.kb.cert.org/vuls/id/404382  View
68964 10049 CVE-2004-1621 BID:11458  View
68965 10049 CVE-2004-1621 URL:http://www.securityfocus.com/bid/11458  View
68966 10049 CVE-2004-1621 SECTRACK:1011779  View
68967 10049 CVE-2004-1621 URL:http://securitytracker.com/id?1011779  View
68968 10049 CVE-2004-1621 SECUNIA:12891  View
68969 10049 CVE-2004-1621 URL:http://secunia.com/advisories/12891  View
68970 10049 CVE-2004-1621 XF:lotus-notes-xss(17758)  View

Related JVN