CVE-2006-1948

The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store…

published April 20, 2006

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00982 · 61.9th percentile
Published
2006-04-20T22:00Z
EPSS history
Timeline
  • 20 APR 22:00Z
    The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store…
    cvelistv5