Security Vendor Says Notes And Domino Have HolesSecurity Vendor Says Notes And Domino Have Holes

Security firm NGS Software has issued advisories for vulnerabilities in IBM's Lotus Notes 6, its iNotes client, and two Domino server products.

The holes, NGS said, include "critical risk" flaws in Domino 6 that could open the server to a denial-of-service attack, as well as buffer overflow problems in the Domino Web Server iNotes and the Domino Web Server Host.

The fourth vulnerability, rated as only a "medium risk," is in the iNotes client, which suffers from a flaw that may let attackers execute code on the victim's machine.

NGS recommended that users update to the most recent editions of Notes and Domino, version 6.0.1, which is available for download from the Lotus Web site.