CVE-2011-0919 Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender addr...
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | All versions | No fix listed |
References
- 43224 third-party-advisory
- www-01.ibm.com vendor-advisory
- 20110207 ZDI-11-045: IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability mailing-list
- zerodayinitiative.com