CVE-2007-0977

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2007-02-16

Last modified

2024-08-07

Affected products

• Lotus Domino (Ibm)

References

• http://osvdb.org/35764
• https://www.exploit-db.com/exploits/3302