CVE-2007-0068

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jun 6, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-00699.3Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of serCVE-2007-00719.3Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code viCVE-2007-007210.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007310.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007410.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-00757.5AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00767.5Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dataCVE-2007-00775.0lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00785.0BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datCVE-2007-00797.8rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00806.6Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to theCVE-2007-00816.8Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpap
CVE-2007-0068: Critical severity, CVSS 9.3 | Vulnix