Vulnerabilities > CVE-2003-0123 - Buffer Overflow Denial Of Service vulnerability in IBM Lotus Domino and Lotus Notes Client
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
Vulnerable Configurations
Nessus
| NASL family | Gain a shell remotely |
| NASL id | DOMINO5_OVERFLOWS.NASL |
| description | The remote Lotus Domino server, according to its version number, is affected by various buffer overflows affecting it when it acts as a client (through webretriever) or in LDAP. An attacker may use these to disable this server or execute arbitrary commands on the remote host. |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 11338 |
| published | 2003-03-10 |
| reporter | This script is Copyright (C) 2003-2018 Tenable Network Security, Inc. |
| source | https://www.tenable.com/plugins/nessus/11338 |
| title | IBM Lotus Domino < 5.0.12 / 6.0.1 Multiple Vulnerabilities |
References
- http://marc.info/?l=bugtraq&m=104757545500368&w=2
- http://www.cert.org/advisories/CA-2003-11.html
- http://www.ciac.org/ciac/bulletins/n-065.shtml
- http://www.kb.cert.org/vuls/id/411489
- http://www.rapid7.com/advisories/R7-0011.html
- http://www.securityfocus.com/bid/7038
- http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11525