Detections
Analytics

Lotus Notes < 7.0.2 ntmulti.exe Local Privilege Escalation

high Nessus Network Monitor Plugin ID 4186

Synopsis

The remote host is vulnerable to a local 'privilege escalation' flaw.

Description

The remote host is running the Lotus Notes email client. The reported version is less than 7.0.2. There is a flaw in this version of Lotus Notes that would allow a local user to replace the 'ntmulti.exe' file. After replacing the executable, the local attacker would have their code executed with SYSTEM level privileges.

Solution

Upgrade to version 7.0.2 or higher.

See Also

http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773

Plugin Details

Severity: High

ID: 4186

Family: SMTP Clients

Published: 8/22/2007

Updated: 3/6/2019

Reference Information

BID: 25401