CVE-2010-0921
published 2010-03-03CVE-2010-0921: Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers…
PriorityP422medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.58%
43.6th percentile
Cross-site request forgery (CSRF) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to hijack the authentication of unspecified victims via vectors related to lack of "XSS/CSRF Get Filter and Referer Check fixes."
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_inotes | <= 229.271 | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
| ibm | lotus_inotes | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt
suricata·2010-07-30
CVE-2009-0921 ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt
ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt
Rule: alert http1 $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER HP OpenView /OvCgi/Toolbar.exe Accept Language Heap Buffer Overflow Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/OvCgi/Toolbar.exe"; nocase; fast_pattern; http.header; content:"Accept-Language|3a 20|"; nocase; isdataat:1350,relative; content:!"|0A|"; within:1350; content:"Content-Length|3a|"; distance:0; reference:cve,2009-0921; classtype:web-application-attack; sid:2010864; rev:11; metadata:created_at 2010_07_30, cve CVE_2009_0921, confidence High, signature_severity Major, updated_at 2024_04_10;)
No public exploits indexed.
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg27018109http://www.securityfocus.com/bid/38459http://www.vupen.com/english/advisories/2010/0496https://exchange.xforce.ibmcloud.com/vulnerabilities/56556http://www-01.ibm.com/support/docview.wss?uid=swg27018109http://www.securityfocus.com/bid/38459http://www.vupen.com/english/advisories/2010/0496https://exchange.xforce.ibmcloud.com/vulnerabilities/56556
2010-03-03
Published