CVE-2005-2428

EPSS 73.6%

Vexday Risk Score

60Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

PoC popular en GitHub (3 estrellas) — código de explotación ampliamente disponible.

CVSS —EPSS 73.6%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Ciclo de vida

03 ago 2005Publicada en NVD

13 feb 2007PoC pública

Velocidad de armamento

559 díashasta el primer PoC

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 4

githubgithub.com/schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit★ 3 cve_referencewww.exploit-db.com/exploits/39495/no verificado exploitdbwww.exploit-db.com/exploits/3302no verificado exploitdbwww.exploit-db.com/exploits/39495no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://marc.info/?l=bugtraq&m=112240869130356&w=2 http://secunia.com/advisories/16231/http://securitytracker.com/id?1014584 https://exchange.xforce.ibmcloud.com/vulnerabilities/21556 https://www.exploit-db.com/exploits/39495/http://www-1.ibm.com/support/docview.wss?uid=swg21212934 http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf http://www.osvdb.org/18462 http://www.securiteam.com/securitynews/5FP0E15GLQ.html http://www.securityfocus.com/bid/14389