Every CVESearch/Get API key

CVE-2007-6594

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the...

6.9 Medium

CVE-2007-6594 is a medium vulnerability (CVSS 6.9) in Ibm Lotus Notes, published December 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. No source names a fixed version.

What does this mean?
Severity
6.9 MediumCVSS 2.0, NVD
Exploit chance
0.34%EPSS, 28th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.

Exploit likelihood

0.34%Down 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.9

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.

Record
CVE-2007-6594
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.

Record
CVE-2007-6594
Updated
2026-11-02
EUVDEUVD-2007-6560No score

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.

Record
EUVD-2007-6560
Updated
2026-11-03
GitHub AdvisoriesGHSA-8qg9-hcmh-rgjpNo score

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the...

IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.

Record
GHSA-8qg9-hcmh-rgjp
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
aliases, references, titleGitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open