Vulnerability Details CVE-2009-5035
The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.2%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47028
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO47028
- http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument
Products affected by CVE-2009-5035
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0
-
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1