CVE-2006-0120

published 2006-01-09

CVE-2006-0120: Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via…

Priority P4 15 medium 5 CVSS 2.0

AV N AC L Au N C N I N A P

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN).

Affected

12 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino	—	—
ibm	lotus_domino_enterprise_server	—	—
ibm	lotus_domino_enterprise_server	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.