PT-2002-2349 · Ibm · Lotus Domino

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1624

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lotus Domino versions prior to 5.0.10

Description A buffer overflow issue exists in the Lotus Domino web server. This occurs when logging to DOMLOG.NSF and a long HTTP Authenticate header containing certain non-ASCII characters is sent. The issue can cause a denial of service (crash) and may potentially allow the execution of arbitrary code.

Recommendations For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-1624

Produtos afetados

Lotus Domino

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1624 · Nota de Segurança
• http://securityfocus.com/bid/6646 · Correção
• http://securitytracker.com/id?1004052 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1624 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11058 · Nota
• http://kb.cert.org/vuls/id/772563 · Nota