• Fixing CVE-2009-3555 in Lotus Domino

    by  • January 18, 2012 • Lotus • 0 Comments

    A vulnerability assessment turned up a potential issue with my Domino servers.  CVE-2009-3555, or a security concern with SSL renegotiation.

    There is an easy work around for Domino, add the following parameter in your notes.ini file.

    SSL_DISABLE_RENEGOTIATE=1

     

    Reference:

    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

    http://www-01.ibm.com/support/docview.wss?uid=swg21430331

    About

    John Lawren James writes about Lotus Technologies, IBM Collaboration solutions and the state of the security industry. He lives in Ottawa, Ontario, Canada.

    http://www.wildunknown.com