PT-2001-1364 · Lotus · Lotus R5 Domino Server+1

Published 2001-03-12 · Updated 2017-10-10 · CVE-2001-0130

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Lotus R5 Domino Server versions prior to 5.06 Lotus R5 Domino Client versions prior to 5.05

Description: A buffer overflow issue exists in the HTML parser, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary commands by using a malformed font size specifier.

Recommendations: For Lotus R5 Domino Server versions prior to 5.06, update to version 5.06 or later to resolve the issue. For Lotus R5 Domino Client versions prior to 5.05, update to version 5.05 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-0130

Affected Products

Lotus R5 Domino Client

Lotus R5 Domino Server

References · 3

• http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0130 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6207 · Note