PT-2003-1383 · Ibm · Lotus Notes

Published 2003-03-18 · Updated 2017-12-12 · CVE-2003-0122

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Lotus Notes versions prior to R4 Lotus Notes R5 versions prior to 5.0.11 Lotus Notes R6 versions (early releases)

Description The issue allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

Recommendations For Lotus Notes versions prior to R4, update to R4 or later. For Lotus Notes R5 versions prior to 5.0.11, update to 5.0.11 or later. For early releases of Lotus Notes R6, update to a later release of R6.

Fix

Related Identifiers

CVE-2003-0122

Affected Products

Lotus Notes

References · 11

• http://securityfocus.com/bid/7037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0122 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0122 · Note
• http://marc.info/?l=bugtraq&m=104757319829443&w=2 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html · Note
• http://kb.cert.org/vuls/id/433489 · Note
• http://rapid7.com/advisories/R7-0010.html · Note
• http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105101 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11526 · Note
• http://ciac.org/ciac/bulletins/n-065.shtml · Note
• http://cert.org/advisories/CA-2003-11.html · Note