IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, aka SPR KLYH9GGS9W.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21670264 | Vendor Advisory |
http://www.kb.cert.org/vuls/id/350089 | US Government Resource |
https://exchange.xforce.ibmcloud.com/vulnerabilities/91286 |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Information
Published : 2014-04-23 12:55
Updated : 2017-08-28 18:34
NVD link : CVE-2014-0892
Mitre link : CVE-2014-0892
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
ibm
- lotus_domino
- lotus_notes
linux
- linux_kernel