Vulnerability Name:

CVE-2002-0037 (CCN-10095)

Assigned:2001-09-17
Published:2001-09-17
Updated:2008-09-05
Summary:Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Bypass Security
References:Source: BUGTRAQ
Type: UNKNOWN
20010917 Lotus Notes: File attachments may be extracted regardless of document security

Source: CCN
Type: BugTraq Mailing List, Mon Sep 17 2001 - 13:52:52 CDT
Lotus Notes: File attachments may be extracted regardless of document security

Source: BUGTRAQ
Type: UNKNOWN
20010917 Re: Lotus Notes: File attachments may be extracted regardless of document security

Source: CCN
Type: IBM Web site
Lotus Domino R5 Servers*

Source: MITRE
Type: CNA
CVE-2002-0037

Source: CCN
Type: Lotus Customer Support Technote #188900
C API Program Can Extract File Attachments from Documents Regardless of Reader Name Access Controls

Source: XF
Type: UNKNOWN
lotus-domino-nsfdbreadobject(10095)

Source: CCN
Type: US-CERT VU#657899
Lotus Notes does not adequately secure databases thereby permitting arbitrary user to extract file attachments via NSFDbReadObject function call

Source: CERT-VN
Type: US Government Resource
VU#657899

Source: CCN
Type: OSVDB ID: 10817
IBM Lotus Domino Server API Call Direct Access Restriction Bypass

Source: CCN
Type: SecuriTeam Mailing List, SecurityNews 6 Oct 2001
Lotus Notes API Unauthorized Access to File Attachments

Source: XF
Type: UNKNOWN
lotus-domino-nsfdbreadobject(10095)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:ibm:lotus_domino_server:4.5:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:lotus_domino_server:4.6:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:lotus_domino_server:5:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    ibm lotus domino server 4.5
    ibm lotus domino server 4.6
    ibm lotus domino server 5
    ibm lotus domino 5.0