Paul's Down-Home Page: Exchange, messaging, collaboration, security, and more

Multiple Lotus Notes client vulns

This just in from Secunia:

Multiple vulnerabilities have been reported in IBM Lotus Notes, which can be exploited by malicious, local users to gain knowledge of potentially sensitive information and by malicious people to bypass certain security mechanisms or compromise a user's system.

One of the reported vulns is in the Notes ECL mechanism. I'm really interested to see the details, although these vulns are fixed in 7.0.3 and 8.0.