Forum Thread: IBM Lotus Notes 8.5

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
aof123 IBM Lotus Notes 8.5
Member 30th Mar, 2009 08:15
Ranking: 0
Posts: 3
User Since: 30th Mar, 2009
System Score: N/A
Location: N/A
PSI is saying my client version is unsecure and i shall upgrade to version 8.0.1 But this as i can see is a downgrade. ?? Does PSI only check on the first number or ??????

Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 11:45
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 30th Mar, 2009 11:46
Are U sure 8.5 is a final version? I believe it is still in BETA.

Secunia does not report on Beta & Release Candidate (RC) versions.


http://secunia.com/vulnerability_scanning/personal...

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
aof123 RE: IBM Lotus Notes 8.5
Member 30th Mar, 2009 11:52
Score: 0
Posts: 3
User Since: 30th Mar 2009
System Score: N/A
Location: N/A
It is a final product version and has been for some time now.

http://www-01.ibm.com/software/lotus/products/note...


Was this reply relevant?
+0
-0
Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 16:39
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 30th Mar, 2009 16:39
Sorry not sure I can help any more. From the link U gave me which I had already checked all I can find is that Lotus Notes 8.5 was released in January 2009 in trial form.

My links that suggest it is not a final release are here:

http://www14.software.ibm.com/webapp/download/sear...

http://www-01.ibm.com/software/lotus/products/note...

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
mtnbikenc RE: IBM Lotus Notes 8.5
Member 30th Mar, 2009 17:10
Score: 0
Posts: 5
User Since: 30th Mar 2009
System Score: N/A
Location: US
Lotus Notes 8.5 is a fully released product.

http://www.ibm.com/developerworks/lotus/library/no...

It is available in trial form just for 'try before you buy' just like you can download in full form just about any Adobe product to use for a limited time.
Was this reply relevant?
+0
-0
Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 18:05
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
If we all agree this is a final release then V 8.5 was a major enhancement upgrade. There is no indication I can see that any part of this upgrade was security related.

Once again, Secunia only reports on the last secure version not programme enhancements or bug fixes therefore it appears to be saying, by default, that U have an insecurity pre version 8.01.

Worth having a look at the path to the alleged insecurity using the advanced mode. Could well be a file left behind on upgrading to 8.5.



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
aof123 RE: IBM Lotus Notes 8.5
Member 30th Mar, 2009 18:50
Score: 0
Posts: 3
User Since: 30th Mar 2009
System Score: N/A
Location: N/A
It is a new install of lotus notes on a newly installed computer. As I can see secunia does not knoe of version 8.5 a think it is a native version 8.0
Was this reply relevant?
+0
-0
Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 19:16
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 30th Mar, 2009 19:18


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
mtnbikenc RE: IBM Lotus Notes 8.5
Member 30th Mar, 2009 19:32
Score: 0
Posts: 5
User Since: 30th Mar 2009
System Score: N/A
Location: US
I too have a fresh install of Lotus Notes 8.5 on a fresh WinXP install. As reported in the Advanced interface the install path is:
c:\Program Files\IBM\Lotus\Notes\notes.exe

Please also note that the original release date for this advisory (SA27317) was 2007-10-23. I had no indication of a threat for this application until last week. Also note that the advisory was last updated on 2009-03-24. It appears to me that something has changed in the way PSI is detecting a threat for this application as I have not changed anything in the way of the OS or application install.

Other interesting advisories that may be related:
http://secunia.com/advisories/34355
http://secunia.com/advisories/34318
Was this reply relevant?
+0
-0
Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 21:26
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 30th Mar, 2009 21:26
Have U installed the Notes patch dated 17 March 2009?

Link is here:
http://www-01.ibm.com/support/search.wss?rs=475&tc...

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
mtnbikenc RE: IBM Lotus Notes 8.5
Member 30th Mar, 2009 21:34
Score: 0
Posts: 5
User Since: 30th Mar 2009
System Score: N/A
Location: US
No. That patch applies to Software versions 6.5, 7.0, 8.0. I have version 8.5 installed.

Was this reply relevant?
+0
-0
Maurice Joyce RE: IBM Lotus Notes 8.5
Handling Contributor 30th Mar, 2009 22:08
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I do not use Lotus but on searching around trying to help I am now convinced,as U suspected, that this is a false positive.

Might be an idea to contact support & ask them to look & comment on this thread?



support@secunia.com

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
This user no longer exists RE: IBM Lotus Notes 8.5
Secunia Official 31st Mar, 2009 14:48
Hi!

We have corrected a version rule and Lotus Notes 8.5 should now be displayed as secure!




--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
mtnbikenc RE: IBM Lotus Notes 8.5
Member 31st Mar, 2009 16:17
Score: 0
Posts: 5
User Since: 30th Mar 2009
System Score: N/A
Location: US
Rescanned and confirmed. Thanks!
Was this reply relevant?
+0
-0
rossb49 RE: IBM Lotus Notes 8.5
Member 31st Mar, 2009 17:18
Score: 0
Posts: 2
User Since: 5th Mar 2008
System Score: N/A
Location: N/A
I think Secunia got this wrong (first time for everything!)
From IBM (http://www-01.ibm.com/support/docview.wss?rs=475&q...) :

"This issue was reported to Quality Engineering as SPR#s PRAD7NSR9Z. We have received a software update from the technology vendor involved and will address the issue in future Maintenance Releases/Fix Packs. In the meantime, you must contact IBM Support to obtain the patch, which is available for Notes 7.x and 8.x client versions. Lotus Notes version 8.5 is not vulnerable."
Was this reply relevant?
+0
-0
rossb49 RE: IBM Lotus Notes 8.5
Member 31st Mar, 2009 17:22
Score: 0
Posts: 2
User Since: 5th Mar 2008
System Score: N/A
Location: N/A
rescanned and confirmed OK - thanks
Was this reply relevant?
+0
-0

This thread has been marked as locked.