ID CVE-2003-0178
Summary Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
References
Vulnerable Configurations
  • IBM Lotus Domino Web Server 6.0
    cpe:2.3:a:ibm:lotus_domino_web_server:6.0
CVSS
Base: 10.0 (as of 01-01-2004 - 00:00)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
nessus via4
NASL family Web Servers
NASL id DOMINO6_OVERFLOWS.NASL
description The remote Lotus Domino server, according to its version number, is vulnerable to various buffer overflow and denial of service attacks. An attacker may use these to disable this server or execute arbitrary commands on the remote host.
last seen 2019-01-16
modified 2018-07-10
plugin id 11386
published 2003-03-14
reporter Tenable
source https://www.tenable.com/plugins/index.php?view=single&id=11386
title IBM Lotus Domino 6.0 Multiple Vulnerabilities
refmap via4
bid
  • 6870
  • 6871
bugtraq
  • 20030217 Domino Advisories UPDATE
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
cert CA-2003-11
cert-vn
  • VU#206361
  • VU#542873
  • VU#772817
ciac N-065
misc
ntbugtraq
  • 20030217 Domino Advisories UPDATE
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
vulnwatch
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
  • 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)
xf
  • lotus-domino-hostname-bo(11337)
  • lotus-domino-inotes-bo(11336)
Last major update 17-10-2016 - 22:30
Published 02-04-2003 - 00:00
Last modified 10-07-2017 - 21:29
Back to Top