CVE-2015-0179: High severity ibm lotus domino vulnerability

Published Apr 6, 2015

Updated

Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.

Affected Software

5 affected components

IBM Domino=8.5.0

IBM Domino=8.5.1

IBM Domino=8.5.2

IBM Domino=8.5.3

IBM Domino=9.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21700029

Event History

Apr 6, 2015

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0179?

CVE-2015-0179 has a moderate severity rating as it allows local users to gain system privileges.

How do I fix CVE-2015-0179?

Updating IBM Domino to version 8.5.3 FP6 IF6 or 9.0.1 FP3 IF1 resolves the vulnerability in CVE-2015-0179.

Who is affected by CVE-2015-0179?

Local users of IBM Domino versions 8.5.0, 8.5.1, 8.5.2, 8.5.3 prior to FP6 IF6, and 9.0.1 prior to FP3 IF1 are affected by CVE-2015-0179.

What types of attacks can exploit CVE-2015-0179?

CVE-2015-0179 can be exploited through unspecified vectors allowing local users unauthorized access to system privileges.

Is remote execution possible with CVE-2015-0179?

CVE-2015-0179 is a local privilege escalation vulnerability and does not allow for remote code execution.