← back
CVE-2011-1519

CVE-2011-1519

EPSS 9.2%
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/18179unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/43860http://securityreason.com/securityalert/8164http://securitytracker.com/id?1025241http://www.securityfocus.com/archive/1/517119/100/0/threadedhttp://www.securityfocus.com/bid/46985http://www.vupen.com/english/advisories/2011/0758http://www.zerodayinitiative.com/advisories/ZDI-11-110