CVE Feed

    Dashboard / CVE / CVE-2008-1965

    CVE-2008-1965

    Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname.

    Published:Apr 25, 2008
    Last Modified:Apr 23, 2026
    EPS:Apr 25, 2008
    EPSS Score:0.37856
    CVSS Score:9.3

    Affected Products

    Vendor
    Ibm
    Product
    Lotus Expeditor Client
    Vendor
    Ibm
    Product
    Lotus Symphany

    Exploits

    http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.htmlhttp://www.securityfocus.com/bid/28926http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.htmlhttp://www.securityfocus.com/bid/28926https://www.exploit-db.com/exploits/31706

    References

    http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html
    http://secunia.com/advisories/29958
    http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability
    http://www-1.ibm.com/support/docview.wss?uid=swg21303813
    http://www.securityfocus.com/archive/1/491343/100/0/threaded
    http://www.securityfocus.com/bid/28926
    http://www.securitytracker.com/id?1019951
    http://www.securitytracker.com/id?1019952
    http://www.vupen.com/english/advisories/2008/1394/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41990
    http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html
    http://secunia.com/advisories/29958
    http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability
    http://www-1.ibm.com/support/docview.wss?uid=swg21303813
    http://www.securityfocus.com/archive/1/491343/100/0/threaded
    http://www.securityfocus.com/bid/28926
    http://www.securitytracker.com/id?1019951
    http://www.securitytracker.com/id?1019952
    http://www.vupen.com/english/advisories/2008/1394/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41990

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High