PT-2003-1383 · Ibm · Lotus Notes

Publicado 2003-03-18 · Atualizado 2017-12-12 · CVE-2003-0122

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lotus Notes versions prior to R4 Lotus Notes R5 versions prior to 5.0.11 Lotus Notes R6 versions (early releases)

Description The issue allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

Recommendations For Lotus Notes versions prior to R4, update to R4 or later. For Lotus Notes R5 versions prior to 5.0.11, update to 5.0.11 or later. For early releases of Lotus Notes R6, update to a later release of R6.

Correção

Identificadores relacionados

CVE-2003-0122

Produtos afetados

Lotus Notes

Referências · 11

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0122 · Nota
• http://marc.info/?l=bugtraq&m=104757319829443&w=2 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html · Nota
• http://kb.cert.org/vuls/id/433489 · Nota
• http://rapid7.com/advisories/R7-0010.html · Nota
• http://securityfocus.com/bid/7037 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105101 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11526 · Nota
• http://ciac.org/ciac/bulletins/n-065.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0122 · Nota de Segurança
• http://cert.org/advisories/CA-2003-11.html · Nota