CVE-2018-1437 - OpenCVE

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.

No CVSS v3.1

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:M/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Ibm	Notes

Configuration 1 [-]

OR	cpe:2.3:a:ibm:notes:8.5:::::::*
	cpe:2.3:a:ibm:notes:8.5.0.2:::::::*
	cpe:2.3:a:ibm:notes:8.5.1:::::::*
	cpe:2.3:a:ibm:notes:8.5.1.5:::::::*
	cpe:2.3:a:ibm:notes:8.5.2:::::::*
	cpe:2.3:a:ibm:notes:8.5.2.4:::::::*
	cpe:2.3:a:ibm:notes:8.5.3:::::::*
	cpe:2.3:a:ibm:notes:8.5.3.6:::::::*
	cpe:2.3:a:ibm:notes:9.0:::::::*
	cpe:2.3:a:ibm:notes:9.0.1:::::::*
	cpe:2.3:a:ibm:notes:9.0.1.9:::::::*

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg22014201	Patch Vendor Advisory
http://www.securityfocus.com/bid/103401	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040563	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/139565	VDB Entry Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ibm

Published: 2018-03-08T00:00:00

Updated: 2018-04-07T09:57:01

Reserved: 2017-12-13T00:00:00

Link: CVE-2018-1437

JSON object: View

NVD Information

Status : Modified

Published: 2018-03-14T00:29:00.373

Modified: 2019-10-09T23:38:27.773

Link: CVE-2018-1437

JSON object: View

Redhat Information

No data.

CWE

CWE-426

{"containers": {"cna": {"affected": [{"product": "Notes", "vendor": "IBM", "versions": [{"status": "affected", "version": "8.5.3.6"}, {"status": "affected", "version": "8.5"}, {"status": "affected", "version": "8.5.1"}, {"status": "affected", "version": "8.5.1.5"}, {"status": "affected", "version": "8.5.2"}, {"status": "affected", "version": "8.5.2.4"}, {"status": "affected", "version": "8.5.3"}, {"status": "affected", "version": "9.0.1"}, {"status": "affected", "version": "9.0"}, {"status": "affected", "version": "8.5.0.2"}, {"status": "affected", "version": "9.0.1.9"}]}], "datePublic": "2018-03-08T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:R", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Gain Privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-04-07T09:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014201"}, {"name": "103401", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/103401"}, {"name": "ibm-notes-cve20181437-code-exec(139565)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139565"}, {"name": "1040563", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1040563"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-03-08T00:00:00", "ID": "CVE-2018-1437", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Notes", "version": {"version_data": [{"version_value": "8.5.3.6"}, {"version_value": "8.5"}, {"version_value": "8.5.1"}, {"version_value": "8.5.1.5"}, {"version_value": "8.5.2"}, {"version_value": "8.5.2.4"}, {"version_value": "8.5.3"}, {"version_value": "9.0.1"}, {"version_value": "9.0"}, {"version_value": "8.5.0.2"}, {"version_value": "9.0.1.9"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565."}]}, "impact": {"cvssv3": {"BM": {"A": "H", "AC": "L", "AV": "L", "C": "H", "I": "H", "PR": "N", "S": "U", "UI": "R"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Privileges"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg22014201", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22014201"}, {"name": "103401", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103401"}, {"name": "ibm-notes-cve20181437-code-exec(139565)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139565"}, {"name": "1040563", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040563"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2018-1437", "datePublished": "2018-03-08T00:00:00", "dateReserved": "2017-12-13T00:00:00", "dateUpdated": "2018-04-07T09:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:notes:8.5:*:*:*:*:*:*:*", "matchCriteriaId": "3F7D9C09-7257-493B-9DDB-F310FBA93AC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "D950A9B5-EECB-4101-8D16-CB2E6A6077A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "AC345FBA-BDE8-443A-8B90-FB394AE9C31C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "72683B62-0BB1-4FB2-8661-447FCF535885", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "F11A6454-9322-467F-B305-820A54A1EC8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "5FBB9A06-5600-4174-A4A5-C85059DDE4B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "BB9D342A-15AA-4627-8BB5-4F99271265B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "99D14E8F-303F-4BE3-9BC4-0646B71A8660", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "C9ABFF78-233F-4413-AE17-C290D50E2E87", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FF1783BE-BA10-43E6-89DB-DBEAFDC7416B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "C0946E0E-508F-49D0-BBA8-8CB725BDD3D9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565."}, {"lang": "es", "value": "IBM Notes 8.5 y 9.0 podr\u00eda permitir que un atacante ejecute c\u00f3digo arbitrario en el sistema. Esto ha sido provocado por un error relacionado con m\u00faltiples rutas de b\u00fasqueda no fiables. Un atacante local podr\u00eda explotar esta vulnerabilidad de secuestro de DLL para ejecutar c\u00f3digo arbitrario en el sistema o provocar que la aplicaci\u00f3n se cierre inesperadamente. IBM X-Force ID: 139565."}], "id": "CVE-2018-1437", "lastModified": "2019-10-09T23:38:27.773", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}]}, "published": "2018-03-14T00:29:00.373", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014201"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/103401"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1040563"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/139565"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-426"}], "source": "nvd@nist.gov", "type": "Primary"}]}