GCVE - cpe:2.3:a:ibm:lotus_domino:7.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:7.0.4:*:*:*:*:*:*:*

part: a version: 7.0.4 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Domino (`7030e5ee-c39c-5b5b-b087-3089d04acc96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1519`	vulnerable	2026-06-08 04:58:00.043063	Details available The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920. Published: 2011-03-25T19:00:00.000Z Updated: 2024-08-06T22:28:41.786Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-11-110 http://www.vupen.com/english/advisories/2011/0758 http://securitytracker.com/id?1025241 http://www.securityfocus.com/archive/1/517119/100/0/threaded http://secunia.com/advisories/43860	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0915`	vulnerable	2026-06-08 04:56:40.241235	Details available Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.595Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/516245/100/0/threaded http://secunia.com/advisories/43208 http://www-01.ibm.com/support/docview.wss?uid=swg21461514 http://zerodayinitiative.com/advisories/ZDI-11-048/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0914`	vulnerable	2026-06-08 04:56:40.239349	Details available Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.845Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-052/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0913`	vulnerable	2026-06-08 04:56:40.228291	Details available Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache. Published: 2011-02-08T21:00:00.000Z Updated: 2024-08-06T22:05:54.818Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43208 http://zerodayinitiative.com/advisories/ZDI-11-053/ http://www-01.ibm.com/support/docview.wss?uid=swg21461514	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.