Tag: notes.ini

Potential IBM Lotus Notes information leakage on port 1352

Andrew Christiansen contacted IBM® Lotus® to report a potential vulnerability
in unauthenticated transactions using the Notes Remote Procedure Call (NRPC)
protocol on port 1352.
The advisory address is as follows:
http://www.fortconsult.net/artikler/advisories.php

The NRPC protocol uses an unauthenticated transaction to look up a user
who is not yet authenticated so that the user can fetch their ID file during
Notes® setup. This transaction is optionally used when a user is first
registered or when a roaming user connects from a new client."

IBM Lotus Notes information leakage on port 1352 via the Lotus Domino Support RSS feed.

Force Notes to use mail.box when multiple mail.boxes are enabled

Although IBM states that putting e-mails directly in the mail.box isn’t a supported option, and Julie Kadashevich has been touting against it for years on Notes.net, apparently there is a setting for the notes.ini ensuring that Domino will continue to use the mail.box even though multiple mail.boxes has been configured. Only goes to show that it doesn’t help trying to enforce not using a hack that developers use because it is just easier…

Can Notes be forced to use mail.box when multiple mail.boxes are enabled via the Lotus Support RSS feed.