PT-2002-2349 · Ibm · Lotus Domino

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1624

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lotus Domino versions prior to 5.0.10

Description A buffer overflow issue exists in the Lotus Domino web server. This occurs when logging to DOMLOG.NSF and a long HTTP Authenticate header containing certain non-ASCII characters is sent. The issue can cause a denial of service (crash) and may potentially allow the execution of arbitrary code.

Recommendations For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-1624

Affected Products

Lotus Domino

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1624 · Security Note
• http://securityfocus.com/bid/6646 · Patch
• http://securitytracker.com/id?1004052 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1624 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11058 · Note
• http://kb.cert.org/vuls/id/772563 · Note