CVE-2004-0029 — IBM Lotus Domino vulnerability

3 documents3 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 83.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedJan 20
Latest updateApr 29

Description

Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/lotus_domino6.0.2

🔴Vulnerability Details

2
GHSA
GHSA-jfxg-j4gh-qrgj: Lotus Notes Domino 6↗2022-04-29
▶
CVEList
CVE-2004-0029: Lotus Notes Domino 6↗2004-01-08
▶
CVE-2004-0029 — IBM Lotus Domino vulnerability | cvebase