IBM Lotus Domino R5 and R6 WebMail, with Generate HTML for all fields enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lotus_domino | Ibm | 5.0 (including) | 5.0 (including) |
| Lotus_domino | Ibm | 6.0 (including) | 6.0 (including) |