CVE-2006-0120 json
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (applic…
published 2006-01-09 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0128
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.6%
- EPSS 1.6% chance of exploitation in 30 days, percentile 76%
- public exploits
- 0
- none known
Summary
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN).
Patch / fix
- securityfocus.com/bid/16158 patch
- secunia.com/advisories/18328 advisory
Exploit prediction
1.64% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
-
securityfocus.com
/bid/16158
vdb-entry, patch
-
secunia.com
/advisories/18328
third-party-advisory, patch, vendor-advisory
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/4118a1f266afb26c852570e4001baf5e?OpenDocument
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ad0dd14aa109f96b852570e4001bb08c?OpenDocument
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/5f166a44ee743b2c852570e4001baf31?OpenDocument
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/040482aeb1416bb7852570e4001badd6?OpenDocument
- www-1.ibm.com /support/docview.wss?uid=swg27007054
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24212
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24214
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24213
vdb-entry
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/2bb4f466a9e986ae852570e4001babbb?OpenDocument
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24215
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24216
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24217
vdb-entry
- www-10.lotus.com /ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/258394eaa824f2c08525708a004209d3?OpenDocument
- www-10.lotus.com /ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ced5f873baea4e8b852570e4001baa6d?OpenDocument
-
vupen.com
/english/advisories/2006/0081
vdb-entry
Sources
- CVE List CVE-2006-0120
- NVD CVE-2006-0120
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.