bugtraq - Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <alpine.LNX.2.00.1005241342080.27552@forced.attrition.org>
Date: Mon, 24 May 2010 13:44:45 -0500 (CDT)
From: security curmudgeon <jericho@...rition.org>
To: lament@...ack.org
Cc: bugtraq@...urityfocus.com
Subject: Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability


Seriously?

This was reported in Jul 2001 by Hiromitsu Takagi, and assigned 
CVE-2001-1161.

http://seclists.org/bugtraq/2001/Jul/22

Would you please:

a) check to see if a vulnerability has been published
b) test current software
c) include the full name of the product you are testing

"IBM Lotus 6.x", presumably IBM Lotus Domino is currently around version 
8.5 or so, per the link you provided:

: http://www-01.ibm.com/software/lotus/