CVE-2004-0480

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.

• CWE-88

• http://marc.info/?l=bugtraq&m=108843896506099&w=2Third Party Advisory
• http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510Broken Link, Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=111&type=vulnerabilitiesBroken Link, Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10600Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16496Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=108843896506099&w=2Third Party Advisory
• http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510Broken Link, Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=111&type=vulnerabilitiesBroken Link, Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/10600Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16496Third Party Advisory, VDB Entry

Published

Dec 6, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0474Help Center (HelpCtr.exe) may allow remote attackers to read…
• CVE-2004-0475The showHelp function in Internet Explorer 6 on Windows XP P…
• CVE-2004-0476Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router…
• CVE-2004-0477Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL …
• CVE-2004-0478Unknown versions of Mozilla allow remote attackers to cause …
• CVE-2004-0479Internet Explorer 6 allows remote attackers to cause a denia…
• CVE-2004-0481The logging feature in kcms_configure in the KCMS package on…
• CVE-2004-0482Multiple integer overflows in (1) procfs_cmdline.c, (2) proc…
• CVE-2004-0483Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allo…
• CVE-2004-0484mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows re…
• CVE-2004-0485The default protocol helper for the disk: URI on Mac OS X 10…
• CVE-2004-0486HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts t…