Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files (shared memory) in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character sequences into a session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lotus Domino任意访问内存映射文件漏洞
Vulnerability Description
Lotus Domino/Notes服务器是一款基于WEB协同工作的应用程序架构，运行在Linux/Unix和Microsoft Windows操作系统平台下。 Lotus Domino的IPC机制实现上存在漏洞，本地攻击者可能利用此漏洞提升权限。 Lotus Domino的NLNOTES和NTASKLDR间进程间通讯(IPC)机制是通过内存映射的文件执行的，在创建文件时向ACL参数传送了NULL，导致EVERYONE都赋予了完全控制权限。 如果部署在共享用户环境中(如终端服务或Citrix)的话，这个漏
CVSS Information
N/A
Vulnerability Type
N/A