IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lotus_notes_traveler | Ibm | * | 8.5.1.1 (including) |
| Lotus_notes_traveler | Ibm | 8.0 (including) | 8.0 (including) |
| Lotus_notes_traveler | Ibm | 8.0.1 (including) | 8.0.1 (including) |
| Lotus_notes_traveler | Ibm | 8.0.1.2 (including) | 8.0.1.2 (including) |
| Lotus_notes_traveler | Ibm | 8.0.1.3 (including) | 8.0.1.3 (including) |
| Lotus_notes_traveler | Ibm | 8.5.0.0 (including) | 8.5.0.0 (including) |
| Lotus_notes_traveler | Ibm | 8.5.0.1 (including) | 8.5.0.1 (including) |
| Lotus_notes_traveler | Ibm | 8.5.0.2 (including) | 8.5.0.2 (including) |
References
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466\u0026action=openDocument
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829
- http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466\u0026action=openDocument