CVEvulnerability
CVE-2005-2175
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-07-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
Affected configurations
• ibm lotus notes
References
- http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html Vendor Advisory
- http://securitytracker.com/id?1014440 securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2005-07/0075.html Vendor Advisory
- http://securitytracker.com/id?1014440 securitytracker.com