IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, aka SPR KLYH9GGS9W.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21670264 | Vendor Advisory |
http://www.kb.cert.org/vuls/id/350089 | US Government Resource |
https://exchange.xforce.ibmcloud.com/vulnerabilities/91286 |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
No history.
Information
Published : 2014-04-23 19:55
Updated : 2024-02-04 18:35
NVD link : CVE-2014-0892
Mitre link : CVE-2014-0892
CVE.ORG link : CVE-2014-0892
JSON object : View
Products Affected
ibm
- lotus_notes
- lotus_domino
linux
- linux_kernel
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor