CVE-2005-1405: Low severity IBM Lotus Notes vulnerability
Published May 3, 2005
·Updated
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
Affected Software
9 affected components
IBM Lotus Notes=6.5.2
IBM Lotus Notes=6.0
IBM Lotus Notes=6.0.1
IBM Lotus Notes=6.0.2
IBM Lotus Notes=6.0.4
IBM Lotus Notes=6.5.1
IBM Lotus Notes=6.5
IBM Lotus Notes=6.5.3
IBM Lotus Notes=6.0.3
Remediation
Patch Available
Event History
May 3, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1405?
CVE-2005-1405 is considered to be of medium severity due to its potential to enable HTTP response splitting and cache poisoning attacks.
2
How do I fix CVE-2005-1405?
To fix CVE-2005-1405, upgrade to IBM Lotus Notes version 6.5.4 or later, or 6.0.5 or later.
3
What systems are affected by CVE-2005-1405?
CVE-2005-1405 affects IBM Lotus Notes versions 6.0 through 6.5.3.
4
What type of vulnerability is CVE-2005-1405?
CVE-2005-1405 is an HTTP response splitting vulnerability found in the @SetHTTPHeader function.
5
Can CVE-2005-1405 be exploited remotely?
Yes, CVE-2005-1405 can be exploited remotely by attackers to poison the web cache.