CVEvulnerability

CVE-2014-0892

5.0 MEDIUM Published 2014-04-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, aka SPR KLYH9GGS9W.

Affected configurations

• ibm lotus domino 8.5.0 • ibm lotus domino 8.5.0.1 • ibm lotus domino 8.5.1 • ibm lotus domino 8.5.1.1 • ibm lotus domino 8.5.1.2 • ibm lotus domino 8.5.1.3 • ibm lotus domino 8.5.1.4 • ibm lotus domino 8.5.1.5 • ibm lotus domino 8.5.2.0 • ibm lotus domino 8.5.2.1 • ibm lotus domino 8.5.2.2 • ibm lotus domino 8.5.2.3 • ibm lotus domino 8.5.2.4 • ibm lotus domino 8.5.3.0 • ibm lotus domino 8.5.3.1 • ibm lotus domino 8.5.3.2 • ibm lotus domino 8.5.3.3 • ibm lotus domino 8.5.3.4 • ibm lotus domino 8.5.3.5 • ibm lotus domino 8.5.3.6 • ibm lotus domino 9.0.0.0 • ibm lotus domino 9.0.1.0 • ibm lotus notes 8.5 • ibm lotus notes 8.5.0.0 • ibm lotus notes 8.5.0.1 • ibm lotus notes 8.5.1 • ibm lotus notes 8.5.1.0 • ibm lotus notes 8.5.1.1 • ibm lotus notes 8.5.1.2 • ibm lotus notes 8.5.1.3 • ibm lotus notes 8.5.1.4 • ibm lotus notes 8.5.1.5 • ibm lotus notes 8.5.2.0 • ibm lotus notes 8.5.2.1 • ibm lotus notes 8.5.2.2 • ibm lotus notes 8.5.2.3 • ibm lotus notes 8.5.3 • ibm lotus notes 8.5.3.1 • ibm lotus notes 8.5.3.2 • ibm lotus notes 8.5.3.3 • ibm lotus notes 8.5.3.4 • ibm lotus notes 8.5.3.5 • ibm lotus notes 8.5.3.6 • ibm lotus notes 9.0.0.0 • ibm lotus notes 9.0.1.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References