CVE-2008-0862 | BDVDB-2026-29360 Detail

Description#

IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (ECL) protection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/0600/references
http://secunia.com/advisories/29031
http://www-1.ibm.com/support/docview.wss?uid=swg21257250

Exploit#

No public exploit known

History#

Version 12008-02-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.