CVE-2005-1405

Published: May 3, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.

Affected (9)

Products: Ibm: Lotus Notes

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes	Version 6.0.1
Ibm Lotus Notes	Version 6.0.2
Ibm Lotus Notes	Version 6.0.3
Ibm Lotus Notes	Version 6.0.4
Ibm Lotus Notes	Version 6.0
Ibm Lotus Notes	Version 6.5.1
Ibm Lotus Notes	Version 6.5.2
Ibm Lotus Notes	Version 6.5.3
Ibm Lotus Notes	Version 6.5

References (12)

http://secunia.com/advisories/14879

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1013839

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/699798

Source: cve@mitre.org

http://www.osvdb.org/15365

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20045

Source: cve@mitre.org

http://secunia.com/advisories/14879

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1013839

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/699798

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/15365

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/20045

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.