PT-2001-1364 · Lotus · Lotus R5 Domino Server+1

Publicado 2001-03-12 · Atualizado 2017-10-10 · CVE-2001-0130

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Lotus R5 Domino Server versions prior to 5.06 Lotus R5 Domino Client versions prior to 5.05

Description: A buffer overflow issue exists in the HTML parser, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary commands by using a malformed font size specifier.

Recommendations: For Lotus R5 Domino Server versions prior to 5.06, update to version 5.06 or later to resolve the issue. For Lotus R5 Domino Client versions prior to 5.05, update to version 5.05 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-0130

Produtos afetados

Lotus R5 Domino Client

Lotus R5 Domino Server

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6207 · Nota
• http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0130 · Nota de Segurança