中危 IBM lotus_domino names.nsf 敏感信息泄漏漏洞

CVE编号

CVE-2005-2428

利用情况

漏洞武器化

补丁情况

官方补丁

披露时间

2005-08-03

漏洞描述

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://marc.info/?l=bugtraq&m=112240869130356&w=2
http://secunia.com/advisories/16231/
http://securitytracker.com/id?1014584
http://www-1.ibm.com/support/docview.wss?uid=swg21212934
http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus...
http://www.osvdb.org/18462
http://www.securiteam.com/securitynews/5FP0E15GLQ.html
http://www.securityfocus.com/bid/14389
https://exchange.xforce.ibmcloud.com/vulnerabilities/21556
https://www.exploit-db.com/exploits/39495/

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	ibm	lotus_domino	5.0	-
	运行在以下环境
	应用	ibm	lotus_domino	6.0	-
	运行在以下环境
	应用	ibm	lotus_domino	6.5	-

阿里云评分 4.8

• 攻击路径 远程
• 攻击复杂度 容易
• 权限要求 无需权限
• 影响范围 有限影响
• EXP成熟度 漏洞武器化
• 补丁情况 官方补丁
• 数据保密性 无影响
• 数据完整性 无影响
• 服务器危害 无影响
• 全网数量 10000

CWE-ID	漏洞类型
NVD-CWE-Other

Exp相关链接

• https://github.com/schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit
• https://raw.githubusercontent.com/jaeles-project/jaeles-signatures/master/cves/lotus-domino-info-leak-cve-2005-2428.yaml
• https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/master/cves/CVE-2005-2428.yaml
• https://www.exploit-db.com/exploits/3302
• https://www.exploit-db.com/exploits/39495

- avd.aliyun.com