NVD

Id
70916  
Name
CVE-2004-0480  
Description
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-06  
Modified Date
2017-07-10  
Seq
2004-0480  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365932 70916 CVE-2004-0480 20040627 Lotus Notes URL argument injection vulnerability  View
365933 70916 CVE-2004-0480 http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510  View
365934 70916 CVE-2004-0480 http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities  View
365935 70916 CVE-2004-0480 10600  View
365936 70916 CVE-2004-0480 lotus-notes-xss(16496)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62898 JVNDB-2004-000240 IBM Lotus Notes/Domino の Notes クライアントにおける任意のコードを実行される脆弱性 IBM Lotus Notes には、 "notes:" URI ハンドラによる入力の妥当性のチェックが適切に行われないために、任意の場所にある notes.ini を指定して Notes クライアント (notes.exe) を起動できる脆弱性が存在します。 CVE-2004-0480 8907 CVE-2004-0480 70916 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000240.html 2004-06-23 2007-04-01 View