CVE-2005-2454

Published: Dec 31, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.

Affected (4)

Products: Ibm: Lotus Notes

Ibm

1 product

Lotus Notes

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes	Version 6.5.4
Ibm Lotus Notes	Version 6.5.5
Ibm Lotus Notes	Version 7.0.0
Ibm Lotus Notes	Version 7.0.1

Related CWEs

CWE-264

References (22)

http://secunia.com/advisories/19537

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27342

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2005-29/advisory/

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1017086

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/383092

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/29761

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449126/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20612

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4093

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29660

Source: cve@mitre.org

http://secunia.com/advisories/19537