CVE-2003-0178 Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parame...
HighCVSS 10.0
EPSS 14.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino web server | = 6.0 | No fix listed |
References
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- 20030217 Domino Advisories UPDATE mailing-list
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- 20030217 Domino Advisories UPDATE mailing-list
- CA-2003-11 third-party-advisory us-government-resource
- N-065 government-resource third-party-advisory
- VU#206361 third-party-advisory us-government-resource
- VU#542873 third-party-advisory us-government-resource
- VU#772817 patch third-party-advisory us-government-resource
- www.nextgenss.com
- www.nextgenss.com
- 6870 vdb-entry
- 6871 patch vdb-entry vendor-advisory
- lotus-domino-inotes-bo(11336) vdb-entry
- lotus-domino-hostname-bo(11337) vdb-entry