CVE-2015-0179

Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21700029	Patch Vendor Advisory
http://www.securitytracker.com/id/1032027	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42605/
http://www-01.ibm.com/support/docview.wss?uid=swg21700029	Patch Vendor Advisory
http://www.securitytracker.com/id/1032027	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42605/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:domino:8.5.0:::::::*
	cpe:2.3:a:ibm:domino:8.5.1:::::::*
	cpe:2.3:a:ibm:domino:8.5.2:::::::*
	cpe:2.3:a:ibm:domino:8.5.3:::::::*
	cpe:2.3:a:ibm:domino:9.0.1:::::::*

History

21 Nov 2024, 02:22

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21700029 - Patch, Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21700029 - Patch, Vendor Advisory
References	~~() http://www.securitytracker.com/id/1032027 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1032027 - Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/42605/ -~~	() https://www.exploit-db.com/exploits/42605/ -

Information

Published : 2015-04-06 00:59

Updated : 2024-11-21 02:22

NVD link : CVE-2015-0179

Mitre link : CVE-2015-0179

CVE.ORG link : CVE-2015-0179

JSON object : View

Products Affected

ibm

domino

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-0179", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-04-06T00:59:04.360", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21700029", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securitytracker.com/id/1032027", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "https://www.exploit-db.com/exploits/42605/", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21700029", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032027", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/42605/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V."}, {"lang": "es", "value": "Notes System Diagnostic (NSD) en IBM Domino 8.5.x anterior a 8.5.3 FP6 IF6 y 9.x anterior a 9.0.1 FP3 IF1 permite a usuarios locales obtener el privilegio System a trav\u00e9s de vectores no especificados, tambi\u00e9n conocido como SPR TCHL9SST8V."}], "lastModified": "2024-11-21T02:22:30.057", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:8.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8458C5E0-40D5-41B6-BBB3-4EE1600BE1F0"}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1D658AF-65B4-4DD7-B445-E16615EA5D82"}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F2A7894-14F0-4FD9-A221-4A88E5CB6A0E"}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "091D9954-232A-4158-A516-35A735343121"}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373527AD-D128-41CC-BEBA-6581F22D8AEE"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}