GCVE - cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*

part: a version: 6.5.6 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Domino (`7030e5ee-c39c-5b5b-b087-3089d04acc96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0915`	vulnerable	2026-06-08 04:56:40.241074	Details available Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.595Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/516245/100/0/threaded http://secunia.com/advisories/43208 http://www-01.ibm.com/support/docview.wss?uid=swg21461514 http://zerodayinitiative.com/advisories/ZDI-11-048/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0914`	vulnerable	2026-06-08 04:56:40.239190	Details available Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.845Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-052/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0913`	vulnerable	2026-06-08 04:56:40.222722	Details available Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.818Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-053/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5701`	vulnerable	2026-06-08 04:50:06.752686	Details available Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive information (passwords) when an administrator enters a "ca activate" or "ca unlock" command with any uppercase character, which bypasses a blacklist designed to suppress password logging, resulting in cleartext password disclosure in the console log and Admin panel. Published: 2007-10-29T21:00:00.000Z Updated: 2024-08-07T15:39:13.582Z Open on db.gcve.eu Reference links http://www-1.ibm.com/support/docview.wss?uid=swg21261095 https://exchange.xforce.ibmcloud.com/vulnerabilities/37372 http://www.vupen.com/english/advisories/2007/3598 http://osvdb.org/40952 http://www.securityfocus.com/bid/26176	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5700`	vulnerable	2026-06-08 04:50:06.749699	Details available The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information. Published: 2007-10-29T21:00:00.000Z Updated: 2024-08-07T15:39:13.564Z Open on db.gcve.eu Reference links http://osvdb.org/40951 https://exchange.xforce.ibmcloud.com/vulnerabilities/37369 http://www.vupen.com/english/advisories/2007/3598 http://www.securityfocus.com/bid/26176 http://www-1.ibm.com/support/docview.wss?uid=swg21273266	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3510`	vulnerable	2026-06-08 04:49:54.130976	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.