CVE-2000-0891: High severity IBM Lotus Notes vulnerability
Published Jul 21, 2001
·Updated
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
Affected Software
1 affected component
IBM Lotus Notes<=5.02
Remediation
Patch Available
Event History
Jul 21, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0891?
CVE-2000-0891 is considered to have a high severity due to its potential for remote code execution.
2
How do I fix CVE-2000-0891?
To fix CVE-2000-0891, upgrade Lotus Notes to version 5.02 or later as this vulnerability is addressed in subsequent releases.
3
What type of attack does CVE-2000-0891 involve?
CVE-2000-0891 involves a remote code execution attack via malicious email attachments.
4
Which versions of Lotus Notes are affected by CVE-2000-0891?
CVE-2000-0891 affects all versions of Lotus Notes prior to 5.02.
5
What actions can be taken to mitigate CVE-2000-0891?
To mitigate CVE-2000-0891, ensure that email attachments are not automatically executed and implement email filtering.