CVE-2007-1675 Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service v...
HighCVSS 10.0
EPSS 62.2%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 6.5.0 | No fix listed |
| ibm lotus domino | = 6.5.1 | No fix listed |
| ibm lotus domino | = 6.5.2 | No fix listed |
| ibm lotus domino | = 6.5.3 | No fix listed |
| ibm lotus domino | = 6.5.4 | No fix listed |
| ibm lotus domino | = 6.5.5 | No fix listed |
| ibm lotus domino | = 7.0 | No fix listed |
| ibm lotus domino | = 7.0.1 | No fix listed |
| ibm lotus domino | = 7.0.2 | No fix listed |
References
- 24633 third-party-advisory vendor-advisory
- www-1.ibm.com patch
- 23172 vdb-entry
- 23173 patch vdb-entry
- 1017823 vdb-entry
- ADV-2007-1133 vdb-entry
- www.zerodayinitiative.com
- domino-imap-crammd5-bo(33276) vdb-entry