----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
IBM Lotus Connections Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA32466

VERIFY ADVISORY:
http://secunia.com/advisories/32466/

CRITICAL:
Moderately critical

IMPACT:
Unknown, Cross Site Scripting, Manipulation of data, Exposure of
sensitive information

WHERE:
>From remote

SOFTWARE:
IBM Lotus Connections 2.x
http://secunia.com/advisories/product/20287/

DESCRIPTION:
Multiple vulnerabilities and security issues have been reported in
IBM Lotus Connections. Some have an unknown impact and others can be
exploited by malicious, local users to disclose sensitive information
and by malicious people to disclosure sensitive information, conduct
cross-site scripting, script insertion, and SQL injection attacks.

1) Input to unspecified parameters is not properly sanitised before
being returned to the user. This can be exploited to execute
arbitrary HTML and script code in a user's browser session in context
of an affected site.

The vulnerabilities are reported in the following components:
* Homepage
* Blogs
* Profiles
* Dogear
* Activities feed and RTE usage from Forum
* Global Search

4) Input passed via the community title is not properly sanitised
before being used, this can potentially be exploited to execute
arbitrary HTML and script code in the user's browser session in
context of an affected site.

3) Input passed via the API is not properly sanitised before being
used. This can be exploited to insert arbitrary HTML and script code,
which will be executed in a user's browser session in context of an
affected site when the malicious data is viewed.

4) Input passed via the "sortField" parameter to unspecified scripts
is not properly sanitised before being used in an SQL query. This can
be exploited to manipulate SQL queries by injecting arbitrary SQL
code.

5) A security issue is caused due to the administrative user's
password being stored within "trace.log".

6) Two security issues are caused due to unspecified password leaks.

7) Various unspecified vulnerabilities related to Active content
exist in Profiles search pages.

SOLUTION:
Update to version 2.0.1.

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
IBM (ASRE7FPNBE, ASRE7FWNT2, ASRE7FWPZ8, ASRE7H3HXG, ASRE7JBMS6,
ASRE7K2RUP, PMAN7JJGD6, BSTL7K7L8Z, RSUN7JTB94, AKON7FWM2W,
AKON7JEKFR, YYCG7GZDAU, YYCG7H84LH, MAHN7FWK9C):
http://www-01.ibm.com/support/docview.wss?uid=swg27014008

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------