NVD

Id
68385  
Name
CVE-2005-2696  
Description
IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and "HTTPPassword" fields in the document properties in the NAB, or (3) a direct query to the Domino LDAP server, a different vulnerability than CVE-2005-2428.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2005-08-26  
Modified Date
2016-10-17  
Seq
2005-2696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
353296 68385 CVE-2005-2696 20050820 IBM Lotus Notes multiple disclosures of password hashes  View
353297 68385 CVE-2005-2696 http://www.venera.com/downloads/Lotus_password_disclosures.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62625 JVNDB-2005-000865 IBM Lotus Notes における Notes Address Book (NAB) への不適切なアクセス制限による情報えいの脆弱性 IBM Lotus Notes には、Notes Address Book (NAB) 内のパスワードハッシュ値に対するアクセス制限が不適切であるため、Notes クライアントの管理タブ内にある password digest フィールドや NAB および Domino LDAP Server の “PasswordDigest”、”HTTPPassword” フィールドを介してパスワードハッシュ値を取得される脆弱性が存在します。 CVE-2005-2696 13900 CVE-2005-2696 68385 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000865.html 2005-07-26 2007-04-26 View