« Volver al listado

CVE-2006-5818

Estado: ModificadaAlta (7.2)—

Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5818",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-08T23:07:00.000",
  "references": [
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=440",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22724",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017198",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21249173",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/20967",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4411",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30151",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=440",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22724",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017198",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21249173",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/20967",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4411",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30151",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en el tunekrnl de IBM Lotus Domino 6.x en versiones anteriores a la 6.5.5 FP2 y 7.x en versiones anteriores a la 7.0.2 permite a usuarios locales  obtener privilegios y ejecutar código de su elección a través de vectores sin especificar.\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:31:56.297",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:*:*:fp1:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "788A2DC5-8DFC-47D8-AAB5-004A2AC2E047",
              "versionEndIncluding": "6.5.5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C3463C8-5B27-4C08-B1F5-571423F8C739",
              "versionEndIncluding": "7.0.1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4B2AFF7-3921-402A-AE7A-BB9E2E8AA0A5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1320064-F0E9-42C8-8E1C-9037684FA693"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.2_cf2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64AB8494-6BC9-43CB-A645-43944B03D10A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06DBE88F-F765-448E-88AF-3ED9FB98181A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE30DC2C-35E9-4E4E-A8FF-2A31CF28B6DF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C9EE627-6072-4359-981B-0168F7D44B7F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53D6F4E6-2C8A-40B6-9DB9-38E15D2AFEEF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99E2CC18-4049-470A-B6DB-580C65FED0A0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2396543F-1507-493C-B57F-3082D6E68894"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C709D66D-3AE7-48B7-9E27-5D1FE452643C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "This vulnerability is addressed in the following product releases:\r\nIBM, Lotus Domino, 6.5.5 FP2\r\nIBM, Lotus Domino, 7.0.2"
}