PT-2007-4770 · Ibm · Ibm Lotus Domino

Published 2007-10-29 · Updated 2017-07-29 · CVE-2007-3510

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions prior to 6.5.6 FP2 IBM Lotus Domino versions 7.x prior to 7.0.3

Description The issue is related to a buffer overflow in the IMAP service, which allows remote authenticated users to execute arbitrary code via a long mailbox name.

Recommendations For versions prior to 6.5.6 FP2, update to 6.5.6 FP2 or later. For versions 7.x prior to 7.0.3, update to 7.0.3 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3510

Affected Products

Ibm Lotus Domino

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-3510 · Security Note
• http://secunia.com/advisories/27321 · Vendor Advisory
• http://securityfocus.com/bid/26176 · Note
• http://securitytracker.com/id?1018854 · Note
• http://vupen.com/english/advisories/2007/3598 · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21270623 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3510 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=605 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37365 · Note