PT-2007-3046 · Ibm · Ibm Lotus Domino

Publicado 2007-03-28 · Atualizado 2017-07-29 · CVE-2007-1675

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM Lotus Domino versions prior to 6.5.6 IBM Lotus Domino versions 7.x prior to 7.0.2 FP1

Description: The issue is related to a buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server. This allows remote attackers to cause a denial of service via a long username.

Recommendations: For versions prior to 6.5.6, update to version 6.5.6 or later. For versions 7.x prior to 7.0.2 FP1, update to version 7.0.2 FP1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2007-1675

Produtos afetados

Ibm Lotus Domino

Referências · 13

• 🔥 https://exploit-db.com/exploits/3616 · Exploit
• 🔥 https://exploit-db.com/exploits/3602 · Exploit
• 🔥 https://exploit-db.com/exploits/4207 · Exploit
• http://zerodayinitiative.com/advisories/ZDI-07-011.html · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21257028 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33276 · Nota
• http://securityfocus.com/bid/23172 · Nota
• http://securitytracker.com/id?1017823 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1675 · Nota de Segurança
• http://secunia.com/advisories/24633 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1133 · Nota
• http://securityfocus.com/bid/23173 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1675 · Nota