Weak IBM Lotus Notes client permissions
Published:		19.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6736
Type:		remote
Level:		5/10
Description:		Application folder has Everyone:Full Control permissions.

Affected:		IBM : Lotus Notes 6.5
		IBM : Lotus Notes 7.0
CVE:		CVE-2005-2454 (IBM Lotus Notes 6.5.4 and 6.5.5, and .0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.)

Original document

SECUNIA, Secunia Research: IBM Lotus Notes Insecure Default FolderPermissions (19.10.2006)

Discuss:

Read or add your comments to this news (0 comments)