CVEvulnerability

CVE-2006-5835

5.0 MEDIUM Published 2006-11-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-11-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.

Affected configurations

• ibm lotus notes 5.0.3 • ibm lotus notes 5.0.12 • ibm lotus notes 6.0 • ibm lotus notes 6.0.1 • ibm lotus notes 6.0.2 • ibm lotus notes 6.0.3 • ibm lotus notes 6.0.4 • ibm lotus notes 6.0.5 • ibm lotus notes 6.5 • ibm lotus notes 6.5.1 • ibm lotus notes 6.5.2 • ibm lotus notes 6.5.3 • ibm lotus notes 6.5.4 • ibm lotus notes 6.5.5 • ibm lotus notes 7.0 • ibm lotus notes 7.0.1

References