Vulnerabilities > IBM > Lotus Notes > 6.5

DATE CVE VULNERABILITY TITLE RISK
2005-12-31 CVE-2005-2618 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
network
autonomy ibm CWE-119
critical
9.3
2005-05-03 CVE-2005-1442 Local NOTES.INI Buffer Overflow vulnerability in IBM Lotus Notes
Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file.
local
low complexity
ibm
4.6
2005-05-03 CVE-2005-1405 Local Security vulnerability in Lotus Notes
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
local
low complexity
ibm
2.1
2004-12-31 CVE-2004-2281 Java Applet vulnerability in IBM Lotus Notes
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3.
network
low complexity
ibm
critical
10.0
2004-12-31 CVE-2004-2280 Java Applet vulnerability in IBM Lotus Notes
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.
network
low complexity
ibm
5.0