Lotus Notes < 7.0.2 ntmulti.exe Local Privilege Escalation

High Nessus Network Monitor Plugin ID 4186

Synopsis

The remote host is vulnerable to a local 'privilege escalation' flaw.

Description

The remote host is running the Lotus Notes email client. The reported version is less than 7.0.2. There is a flaw in this version of Lotus Notes that would allow a local user to replace the 'ntmulti.exe' file. After replacing the executable, the local attacker would have their code executed with SYSTEM level privileges.

Solution

Upgrade to version 7.0.2 or higher.

See Also

http://www-1.ibm.com/support/docview.wss?rs=463&amp;uid=swg21246773

Plugin Details

Severity: High

ID: 4186

File Name: 4186.prm

Family: SMTP Clients

Published: 2007/08/22

Modified: 2016/11/23

Dependencies: 1334

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.2

Temporal Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

CVSSv3

Base Score: 8.4

Temporal Score: 8.2

Vector: CVSS3#AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:U/RC:X

Reference Information

BID: 25401