First published: Tue Mar 25 2014(Updated: )
The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Protector for Mail Security | =2.8 | |
IBM Lotus Protector for Mail Security | =2.8.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0887 has a high severity rating due to the potential for remote authenticated users to execute arbitrary commands with root privileges.
To fix CVE-2014-0887, upgrade IBM Lotus Protector for Mail Security to version 2.8.1-22905 or later.
CVE-2014-0887 affects versions 2.8 and 2.8.1 of IBM Lotus Protector for Mail Security.
An attacker exploiting CVE-2014-0887 can execute arbitrary commands with root privileges on vulnerable systems.
CVE-2014-0887 was disclosed in 2014, highlighting vulnerabilities in IBM Lotus Protector for Mail Security.