CVE-2010-4551

EUVD-2010-4517
IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
ibmlotus_notes_traveler
𝑥
≤ 8.5.1.1
ibmlotus_notes_traveler
8.0
ibmlotus_notes_traveler
8.0.1
ibmlotus_notes_traveler
8.0.1.2
ibmlotus_notes_traveler
8.0.1.3
ibmlotus_notes_traveler
8.5.0.0
ibmlotus_notes_traveler
8.5.0.1
ibmlotus_notes_traveler
8.5.0.2
𝑥
= Vulnerable software versions
References
http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument
http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes
http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument