ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lotus_inotes | Ibm | 8.5.2.0 (including) | 8.5.2.0 (including) |
| Lotus_inotes | Ibm | 8.5.3.0 (including) | 8.5.3.0 (including) |
| Lotus_notes | Ibm | 8.0 (including) | 8.0 (including) |
| Lotus_notes | Ibm | 8.0.1 (including) | 8.0.1 (including) |
| Lotus_notes | Ibm | 8.0.2 (including) | 8.0.2 (including) |
| Lotus_notes | Ibm | 8.5 (including) | 8.5 (including) |
| Lotus_notes | Ibm | 8.5.1 (including) | 8.5.1 (including) |
| Lotus_notes_traveler | Ibm | 9.0 (including) | 9.0 (including) |