PT-2007-3046 · Ibm · Ibm Lotus Domino

Published 2007-03-28 · Updated 2017-07-29 · CVE-2007-1675

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM Lotus Domino versions prior to 6.5.6 IBM Lotus Domino versions 7.x prior to 7.0.2 FP1

Description: The issue is related to a buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server. This allows remote attackers to cause a denial of service via a long username.

Recommendations: For versions prior to 6.5.6, update to version 6.5.6 or later. For versions 7.x prior to 7.0.2 FP1, update to version 7.0.2 FP1 or later.

Exploit

Fix

Related Identifiers

CVE-2007-1675

Affected Products

Ibm Lotus Domino

References · 13

• 🔥 https://exploit-db.com/exploits/3616 · Exploit
• 🔥 https://exploit-db.com/exploits/3602 · Exploit
• 🔥 https://exploit-db.com/exploits/4207 · Exploit
• http://www-1.ibm.com/support/docview.wss?uid=swg21257028 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-1675 · Security Note
• http://secunia.com/advisories/24633 · Vendor Advisory
• http://securityfocus.com/bid/23173 · Patch
• http://zerodayinitiative.com/advisories/ZDI-07-011.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33276 · Note
• http://securityfocus.com/bid/23172 · Note
• http://securitytracker.com/id?1017823 · Note
• http://vupen.com/english/advisories/2007/1133 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1675 · Note