CVE-2011-1519

总结

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field. NOTE: this might overlap CVE-2011-0920. IBM Lotus Domino 7.x 和 8.x 中 Server Controller 的远程控制台会依据客户端指定的 UNC 共享路径名所指向的文件来验证凭据，远程攻击者可通过将该路径名放入 COOKIEFILE 字段来绕过身份验证，进而执行任意代码。注意：此问题可能与 CVE-2011-0920 重叠。

• IBM Lotus Domino Server Controller - Authentication Bypass漏洞利用

  Alexey Sintsov · jsp · 2011年11月30日