« Smoothing Over The 7.0.3 Upgrade on Windows | Main| Ubuntu Continues to Keep It's Momentum »

Bug and Patch in the Same Day for Lotus Notes

Category Security
ComputerWorld, PC World and other publications have reported a "critical" bug discovered in Lotus Notes by Core Security Technologies, apparently for all releases since R5. The bug relies on a technique known as file parsing, and works by exploiting a weakness in the Autonomy KeyView software when it used for viewing Lotus 1-2-3 attachments.

The flaw probably affects other products, according to security experts, because KeyView -- which can be used to view and print files in about 300 file formats -- is used in many different programs. More than 300 companies, including Symantec and Oracle, have licensed the KeyView software.


What isn't posted in the article, is that anyone can go to http://www.Lotus.com/security to find the latest security concerns for Lotus. There is already a posting on this exploit (dated, 11/27) which explains that IBM/Lotus has an available patch.

What do you think the odds are for the other 300 companies having their patches ready?

Posted by Jack Dausman On 11/28/2007 |

Comments

Gravatar Image2 - The funny thing, is that I drafted it in OpenOffice, then dropped it into the web editor. Too many non-html compliant characters were introduced. So, I'll set it up for Scribefire, or stick to the Notes client. Thanks.

Posted by Jack Dausman At 11:49:19 PM On 11/29/2007 | - Website - |


Gravatar Image1 - Jack, your external links include the URL for your own blog before the external URL.

Posted by Charles Robinson At 09:03:10 PM On 11/29/2007 | - Website - |


Post A Comment

:-D:-o:-p:-x:-(:-):-\:angry::cool::cry::emb::grin::huh::laugh::rolleyes:;-)