CVE-2006-5835
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 13%
exploitation probability
13%top 4% of all CVEs
observed exploitation
nono source reports it
The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.
Affected products
n/a · n/aReferences
http://secunia.com/advisories/22741http://securitytracker.com/id?1017203https://exchange.xforce.ibmcloud.com/vulnerabilities/30118http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21248026http://www.fortconsult.net/images/pdf/lotusnotes_keyfiles.pdfhttp://www.securityfocus.com/bid/20960http://www.vupen.com/english/advisories/2006/4411