PT-2001-2538 · Ibm · Lotus Domino

Published 2001-03-01 · Updated 2017-07-11 · CVE-2001-1445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lotus Domino versions 5.0 through 5.7

Description The issue allows remote attackers to bypass mail relaying restrictions in the SMTP server via crafted e-mail addresses in "RCPT TO" commands.

Recommendations For versions 5.0 through 5.7, update to a version that includes a fix for this issue to prevent exploitation.

Fix

Related Identifiers

CVE-2001-1445

Affected Products

Lotus Domino

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1445 · Security Note
• http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6591 · Note
• http://kb.cert.org/vuls/id/176972 · Note