Lotus Notes Password Hieroglyphics Information Disclosure

low Nessus Network Monitor Plugin ID 1305

Synopsis

The remote host may give an attacker information useful for future attacks.

Description

The remote host is running a Lotus Notes 4.6 or 5.x email client. The login dialogue box used by these version of Notes includes a number of security features, including a set of four hieroglyphic characters. The goal of these characters is to increase the difficulty in spoofing the login dialog. An attacker with knowledge of the expected hieroglyphic sequence for a given login may use this dialogue to perform a brute force attack. This will eliminate a number of incorrect passwords, reducing the search space by approximately a factor of two. A conventional brute force attack against the remaining possibilities will then be required.

Solution

Contact vendor for an upgrade/patch.

Plugin Details

Severity: Low

ID: 1305

Family: SMTP Clients

Published: 8/20/2004

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X

Reference Information

BID: 4324

Detections

Analytics