Vulnerability Details : CVE-2013-0536
ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24.
Exploit prediction scoring system (EPSS) score for CVE-2013-0536
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-0536
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2013-0536
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-0536
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/82658
IBM Lotus Notes ntmulti.exe code execution CVE-2013-0536 Vulnerability Report
-
http://www-01.ibm.com/support/docview.wss?uid=swg21633827
IBM Security Bulletin: IBM Notes Multi User Profile Cleanup service enables an attacker to execute arbitrary code on the next logon of a user (CVE-2013-0536)
Products affected by CVE-2013-0536
- cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:9.0:*:*:*:*:*:*:*