CVE-2008-2240 Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execut...
HighCVSS 10.0
EPSS 64.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 6.0 | No fix listed |
| ibm lotus domino | = 6.5 | No fix listed |
| ibm lotus domino | = 7.0 | No fix listed |
| ibm lotus domino | = 8.0 | No fix listed |
| ibm lotus domino | = 8.0.1 | No fix listed |
References
- 30310 third-party-advisory vendor-advisory
- 30332 third-party-advisory vendor-advisory
- www-1.ibm.com patch
- 20080522 Who's Right mailing-list
- 20080522 Who's Right mailing-list
- www.mwrinfosecurity.com patch
- 29310 vdb-entry
- 1020098 vdb-entry
- ADV-2008-1597 vdb-entry
- ibm-lotusdomino-acceptlanguage-bo(42552) vdb-entry