CVE-2015-0179
IBM Domino 8.5.x-8.5.3 FP6 IF6 and 9.x-9.0.1 FP3 IF1 - Local Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-0179. PoCs published by ParagonSec.
AI-analyzed exploit summary The exploit describes a privilege escalation vulnerability in Lotus Notes Diagnostic Tool (nsd.exe) where an attacker can execute commands under the System context by leveraging the tool's monitor mode. The proof of concept involves running 'nsd.exe -monitor' followed by the 'LOAD CMD' command to spawn a System-level command prompt.
Description
Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.
Exploits (1)
The exploit describes a privilege escalation vulnerability in Lotus Notes Diagnostic Tool (nsd.exe) where an attacker can execute commands under the System context by leveraging the tool's monitor mode. The proof of concept involves running 'nsd.exe -monitor' followed by the 'LOAD CMD' command to spawn a System-level command prompt.