Vulnerabilities > CVE-2011-1393 - Unspecified vulnerability in IBM Lotus Domino

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
ibm

Summary

Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.

Seebug

bulletinFamilyexploit
descriptionBugtraq ID: 51167 CVE ID:CVE-2011-1393 IBM Lotus Domino服务器是一款基于WEB合作的应用程序架构。 IBM Lotus Domino处理某些RPC操作存在错误,可被利用进行拒绝服务攻击。 远程攻击者可以提交特制的Notes客户端报文使Lotus Domino服务器崩溃。 0 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.5 FP1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0 厂商解决方案 ------ ibm.com 用户可参考如下供应商提供的安全公告获得补丁信息: http://www.ibm.com/support/docview.wss?uid=swg21575247
idSSV:26097
last seen2017-11-19
modified2011-12-24
published2011-12-24
reporterRoot
titleIBM Lotus Domino RPC操作拒绝服务漏洞