CVE-2011-0920
IBM Lotus Domino - Authentication Bypass and Remote Code Execution via UNC Share Pathname
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-0920.
AI-analyzed exploit summary This exploit leverages an XML parser vulnerability in IBM Lotus Domino Controller to bypass authentication by injecting malicious XML into IIS log files and using a local applet to trigger the exploit. It demonstrates an authentication bypass via crafted HTTP requests and applet parameters.
Description
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS.
Exploits (1)
This exploit leverages an XML parser vulnerability in IBM Lotus Domino Controller to bypass authentication by injecting malicious XML into IIS log files and using a local applet to trigger the exploit. It demonstrates an authentication bypass via crafted HTTP requests and applet parameters.