Vulnerabilities > IBM > Lotus Domino > 8.0.2.5

DATE CVE VULNERABILITY TITLE RISK
2011-12-27 CVE-2011-1393 Unspecified vulnerability in IBM Lotus Domino
Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.
network
low complexity
ibm
7.8
2011-03-25 CVE-2011-1519 Improper Authentication vulnerability in IBM Lotus Domino
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field.
network
low complexity
ibm CWE-287
critical
10.0
2011-02-08 CVE-2011-0915 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM Lotus Domino
Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
network
low complexity
ibm CWE-119
critical
10.0
2011-02-08 CVE-2011-0914 Numeric Errors vulnerability in IBM Lotus Domino
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
network
low complexity
ibm CWE-189
critical
10.0
2011-02-08 CVE-2011-0913 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM Lotus Domino
Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.
network
low complexity
ibm CWE-119
critical
10.0