Lotus Domino Server Mail Processing Summary Data Memory Overwrite

2006-01-03T12:03:19
ID OSVDB:23456
Type osvdb
Reporter OSVDB
Modified 2006-01-03T12:03:19

Description

Vulnerability Description

Lotus Domino Server contains a flaw related to the processing of mail rules or client subscriptions. When summary data returned is approximately 64k bytes, memory may be overwritten. It is not clear if this poses a security risk or not.

Solution Description

Upgrade to version 6.5.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Short Description

Lotus Domino Server contains a flaw related to the processing of mail rules or client subscriptions. When summary data returned is approximately 64k bytes, memory may be overwritten. It is not clear if this poses a security risk or not.

References:

Vendor Specific News/Changelog Entry: http://www-1.ibm.com/support/docview.wss?uid=swg27007054 Vendor Specific News/Changelog Entry: http://www-1.ibm.com/support/docview.wss?uid=sim483f6070d5379e05385257061004209aa Secunia Advisory ID:18328 Keyword: Server JCHN69PNRF