The remote host has a version of IBM Notes (formerly Lotus Notes) 8.0.x / 8.5.x / 9.0.x that is bundled with an IBM Java version prior to 1.6 SR15 FP1. It is, therefore, affected by the vulnerabilities mentioned in the Oracle Java Critical Patch Update advisories for October 2013 and January 2014.

According to its version, the IBM Domino (formerly IBM Lotus Domino) on the remote host is 9.x prior to 9.0.1 Fix Pack 1 (FP1). It is, therefore, affected by the following vulnerabilities :

  - A stack overflow issue exists due to the insecure     '-z execstack' flag being used during compilation, which     could aid remote attackers in executing arbitrary code.
    Note that this issue only affects installs on 32-bit     hosts running Linux. (CVE-2014-0892)

  - Note that the fixes in the Oracle Java CPUs for     October 2013 and January 2014 are included in the fixed     IBM Java release, which is included in the fixed IBM     Domino release. (CVE-2013-0408, CVE-2013-3829,     CVE-2013-4002, CVE-2013-4041, CVE-2013-5372,     CVE-2013-5375, CVE-2013-5456, CVE-2013-5457,     CVE-2013-5458, CVE-2013-5772, CVE-2013-5774,     CVE-2013-5776, CVE-2013-5778, CVE-2013-5780,     CVE-2013-5782, CVE-2013-5783, CVE-2013-5784,     CVE-2013-5787, CVE-2013-5788, CVE-2013-5789,     CVE-2013-5790, CVE-2013-5797, CVE-2013-5800,     CVE-2013-5801, CVE-2013-5802, CVE-2013-5803,     CVE-2013-5804, CVE-2013-5805, CVE-2013-5806,     CVE-2013-5809, CVE-2013-5812, CVE-2013-5814,     CVE-2013-5817, CVE-2013-5818, CVE-2013-5819,     CVE-2013-5820, CVE-2013-5823, CVE-2013-5824,     CVE-2013-5825, CVE-2013-5829, CVE-2013-5830,     CVE-2013-5831, CVE-2013-5832, CVE-2013-5838,     CVE-2013-5840, CVE-2013-5842, CVE-2013-5843,     CVE-2013-5848, CVE-2013-5849, CVE-2013-5850,     CVE-2013-5851, CVE-2013-5878, CVE-2013-5884,     CVE-2013-5887, CVE-2013-5888, CVE-2013-5889,     CVE-2013-5893, CVE-2013-5896, CVE-2013-5898,     CVE-2013-5899, CVE-2013-5902, CVE-2013-5904,     CVE-2013-5907, CVE-2013-5910, CVE-2014-0368,     CVE-2014-0373, CVE-2014-0375, CVE-2014-0376,     CVE-2014-0387, CVE-2014-0403, CVE-2014-0410,     CVE-2014-0411, CVE-2014-0415, CVE-2014-0416,     CVE-2014-0417, CVE-2014-0418, CVE-2014-0422,     CVE-2014-0423, CVE-2014-0424, CVE-2014-0428,     CVE-2014-0892)

The remote host has a version of IBM Domino (formerly Lotus Domino) 8.0.x / 8.5.x / 9.0.x that is bundled with an IBM Java version prior to 1.6 SR15 FP1. It is, therefore, affected by the vulnerabilities mentioned in the Oracle Java Critical Patch Update advisories for October 2013 and January 2014.

ID	Name	Product	Family	Published	Updated	Severity
73970	IBM Notes 8.0.x / 8.5.x / 9.0.x with IBM Java < 1.6 SR15 FP1 Multiple Vulnerabilities	Nessus	Windows	5/12/2014	11/26/2019	critical
73968	IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)	Nessus	Misc.	5/12/2014	4/11/2022	critical
73969	IBM Domino 8.0.x / 8.5.x / 9.0.x with IBM Java < 1.6 SR15 FP1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	5/12/2014	11/26/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical