For best results: this site requires that cookies be enabled for proper operation - see Legal Page for more info

Select Any of These

Translate this page using FreeTranslation.com

Lotus Bugs

LAST UPDATED: Thursday, 14 February 2008 20:47:22 -0600

LOTUS DOMINO SMTP SERVER BUFFER OVERFLOW

The SMTP server included with Lotus Domino and Notes does not conduct adequate bounds checking on the ENVID keyword of the Mail From field. In the event of successful overflow by a malicious user, the Notes server will crash and all Notes services will cease to function. The Notes server will then require a manual restart, and additionally may require manual removal of mail.box and/or log.nsf files. To fix this vulnerability, it is recommended that all users upgrade to the latest release (5.05). Browse to:

http://www.notes.net/qmrdown.nsf/qmrwelcome?OpenView&Start=1&Count=30&Expand=1

LOTUS NOTES CALENDAR VIEW BUG

Users of Lotus Notes should be aware of a bug in version 5. Going to Calendar view and deleting a canceled or expired meeting will result in sending of a Decline notice to the other participants. The Notes Quarterly Maintenance Release 5.0.4a has fixed this. You can download the QMR from

http://www.notes.net/qmrdown.nsf/QMRWelcome

LOTUS NOTES UNENCRYPTED MAIL BUG

By default, Lotus Notes Client automatically encrypts e-mail sent to other Lotus Notes users. It sends two copies of outgoing messages, one to the recipient and one to the Sent Mail folder, normally located on the Domino mail server. Both copies should be encrypted. However, under certain circumstances, the copy sent to the Sent Mail folder could be transmitted in plain text. If the forward slash (/) is used as a path separator when specifying a mail file, rather than a backward slash (\), the unencrypted e-mail vulnerability will result. Malicious users could intercept confidential information on the network. Users are urged to make sure to use only the backward slash as a path separator. There are currently no known vendor-supplied fixes for this bug.

LOTUS SMARTSUITE FOR OS/2 PATCHED

Release 1.5.1 of Lotus SmartSuite for OS/2 fixes a bug that was causing Word Pro to crash when it attempted to import an Excel 97 file. For more information, browse to

http://www.support.lotus.com

In Search By keyword, type

download and release 1.5.1

and click Go. Open the document entitled "Download Instructions for SmartSuite for OS/2 Release 1.5.1 Update."

NETSCAPE META-DIRECTORY VERSUS LOTUS NOTES CONNECTOR

If you are using Netscape Meta-Directory 1.0 and you uninstall Lotus Notes Connector, Netscape says this will leave \Winnt\notes.ini locked, and the Notes client won't be able to log into the server. As a workaround, back up notes.ini before installing Notes Connector.

NOVELL ZENWORKS VERSUS LOTUS NOTES

It has been discovered by Bugnet that when using Novell ZENworks to distribute Lotus Notes 5.05, any user with seven characters in his or her login name may get an error when running the Notes Spellchecker. Furthermore, the Spellchecker may not work on Win2000 clients. Novell has provided a few possible workarounds at the following URL:

http://support.novell.com/cgi-bin/search/tidfinder.cgi?10058114

Questions?

Just Check out some of our sponsors

Shop at BestPrices.Com!

[ Home ] [ Up ]