CVE-2015-0179
HighSummary
In the Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1, local users can obtain System privilege via unspecified vectors.
Risk Assessment
Gaining system privileges by local users can lead to unauthorized access to data and the ability to modify the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update IBM Domino to the latest version to mitigate this vulnerability and to restrict local user access to the system.
Other vulnerabilities in IBM Domino
See all- CVE-2016-0304High
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code.
- CVE-2015-5040High
Buffer overflow in IBM Domino versions 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image.
- CVE-2015-4994High
Buffer overflow in IBM Domino versions 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash) via a crafted GIF image.
- CVE-2015-1903High
A stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image.
- CVE-2015-1902High
A stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image.
- CVE-2015-0135High
IBM Domino versions 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 are vulnerable to remote attacks that can lead to arbitrary code execution or application crash via a crafted GIF image.
- CVE-2015-0134High
Buffer overflow in the SSLv2 implementation in IBM Domino versions 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code.
Original NVD description (English source)
Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.