CVE-2003-0179 Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the Initialize...
HighCVSS 7.5
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino web server | = 6.0 | No fix listed |
| ibm lotus notes client | = 6.0 | No fix listed |
References
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- 20030217 Domino Advisories UPDATE mailing-list
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- 20030217 Domino Advisories UPDATE mailing-list
- www-1.ibm.com
- CA-2003-11 third-party-advisory us-government-resource
- N-065 government-resource third-party-advisory
- VU#571297 patch third-party-advisory us-government-resource
- www.nextgenss.com
- 6872 patch vdb-entry vendor-advisory
- lotus-notes-activex-bo(11339) vdb-entry