CVE-2006-0119

Description

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted vCal meeting request sent via SMTP (aka SPR# KSPR699NBP).

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 13.20% Top 10%

Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory vupen.com Vendor Advisory vupen.com

Affected: n/a n/a

References

Link	Tags
http://www-1.ibm.com/support/docview.wss?uid=swg27007054
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/d1150fc9c5dec8b18525709200001da6?OpenDocument&Highlight=0%2CGPKS6C9J67
http://www.securityfocus.com/bid/16158	vdb entry patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/27413	vdb entry
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%2CKSPR699NBP
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/f97fe7cfd9a8113b8525709200001db4?OpenDocument&Highlight=0%2CGPKS6C9J67
http://secunia.com/advisories/18328	third party advisory patch vendor advisory
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/94a77eb898843aca8525709200001de1?OpenDocument&Highlight=0%2CJGAN6B6TZ3
http://www.vupen.com/english/advisories/2006/2564	vdb entry vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24207	vdb entry
http://secunia.com/advisories/20855	third party advisory vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24211	vdb entry
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/e4deb1cbb011c747852570e4001ba9bb?OpenDocument&Highlight=0%2CGPKS5YQGPT
http://securitytracker.com/id?1016390	vdb entry
http://www.securityfocus.com/bid/18020	vdb entry
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9a1650d1a771f3078525702a00420def?OpenDocument&Highlight=0%2CHSAO6BNL6Y
http://www.securityfocus.com/archive/1/438461/100/0/threaded	mailing list
http://www.vupen.com/english/advisories/2006/0081	vdb entry vendor advisory

Frequently Asked Questions

What is the severity of CVE-2006-0119?: CVE-2006-0119 has been scored as a critical severity vulnerability.
How to fix CVE-2006-0119?: To fix CVE-2006-0119, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-0119 being actively exploited in the wild?: It is possible that CVE-2006-0119 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~13% probability that this vulnerability will be exploited by malicious actors in the next 30 days.