CVEvulnerability
CVE-2010-4551
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Description
IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation.
Affected configurations
• ibm lotus notes traveler (<= 8.5.1.1)
• ibm lotus notes traveler 8.0
• ibm lotus notes traveler 8.0.1
• ibm lotus notes traveler 8.0.1.2
• ibm lotus notes traveler 8.0.1.3
• ibm lotus notes traveler 8.5.0.0
• ibm lotus notes traveler 8.5.0.1
• ibm lotus notes traveler 8.5.0.2
References
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829 Vendor Advisory
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes www-10.lotus.com
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument www-10.lotus.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829 Vendor Advisory
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes www-10.lotus.com
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument www-10.lotus.com