Lotus Notes < 7.0.2 ntmulti.exe Local Privilege Escalation

high Nessus Network Monitor Plugin ID 4186

Synopsis

The remote host is vulnerable to a local 'privilege escalation' flaw.

Description

The remote host is running the Lotus Notes email client. The reported version is less than 7.0.2. There is a flaw in this version of Lotus Notes that would allow a local user to replace the 'ntmulti.exe' file. After replacing the executable, the local attacker would have their code executed with SYSTEM level privileges.

Solution

Upgrade to version 7.0.2 or higher.

Plugin Details

Severity: High

ID: 4186

Family: SMTP Clients

Published: 8/22/2007

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 8.4

Temporal Score: 8.2

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:U/RC:X

Reference Information

BID: 25401

Detections

Analytics