CVE-2011-0917

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX...

CVE-2011-0912

Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2...

CVE-2011-0912

IBM Lotus Notes is affected by an argument-injection vulnerability in the cai:// URI handler that allows remote code execution via a --launcher.library option specifying a UNC DLL path. Affected are Lotus Notes 8.0.x prior to 8.0.2 FP6 and 8.5.x prior to 8.5.1 FP5. The flaw enables code execution...

CVE-2011-0920

The CVE-2011-0920 entry concerns IBM Lotus Domino Remote Console. The vulnerability arises in an unsupported configuration involving UNC share pathnames, enabling an unauthenticated remote attacker to bypass authentication and arbitrarily execute code via unspecified vectors. The description does...

CVE-2011-0919

IBM Lotus Domino’s POP3/IMAP services are affected by multiple remote buffer-overflow vulnerabilities triggered by non-printable characters in the mail-from envelope address. The flaw allows arbitrary code execution, with the ZDI advisory noting exploitation in systems with vulnerable Domino inst...

CVE-2011-0917

IBM Lotus Domino LDAP Bind Request vulnerability (CVE-2011-0917) stems from a buffer overflow in nLDAP.exe when handling a long string in LDAP Bind operations, enabling remote code execution over the LDAP port (389). The issue is documented across multiple advisories (e.g., ZDI-11-047, OpenVAS, a...

CVE-2011-0916

CVE-2011-0916 affects IBM Lotus Domino SMTP service. A stack-based buffer overflow allows remote attackers to execute arbitrary code by sending a malformed MIME email with long arguments in the filename parameter. The vulnerability is categorized as high severity (CVSS 2.0 base score 10.0) and ca...

CVE-2011-0918

CVE-2011-0918 affects IBM Lotus Domino (NRouter/Router service). The issue is a stack-based buffer overflow triggered by long filenames in the Content-ID and ATTACH:CID headers of attachments within malformed calendar-request emails, allowing remote code execution. The root cause is copying heade...

CVE-2011-0919

Multiple stack-based buffer overflows in the 1 POP3 and 2 IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ...

CVE-2011-0914

CVE-2011-0914 affects IBM Lotus Domino prior to 8.5.3 via the DIIOP GIOP path in ndiiop.exe, causing a heap-based buffer overflow that allows remote code execution. Other sources corroborate remote code execution; affected products are Domino 8.5.x before 8.5.3. Remediation evidenced in connected...

CVE-2011-0915

IBM Lotus Domino 8.5.x is affected by CVE-2011-0915 due to a stack-based buffer overflow in nrouter.exe when handling a long name parameter in a Content-Type header of malformed Notes calendar (iCal) meeting requests. The root cause is an overflow in the named field during iCalendar processing, p...

CVE-2011-0915

Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar aka iCalendar or iCal meeting request, aka SPR KLYH87LL23...

CVE-2011-0914

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow...

CVE-2011-0913

IBM Lotus Domino Server is vulnerable to a remote code execution via a stack-based overflow in ndiiop.exe (DIIOP) when handling a GIOP getEnvironmentString request. The flaw exists in the Domino server before 8.5.3, affects ndiiop.exe handling of user-supplied data, and can be exploited remotely ...

CVE-2011-0913

Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache...

KLA10199 ACE vulnerability in IBM Lotus Domino

An unspecified vulnerability was found in IBM Lotus Domino. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Notes calendar, GIOP client request or GIOP environment request. Original advisories -...

IBM Lotus Domino iCalendar Meeting Request Parsing Remote Stack Buffer Overflow Vulnerability

IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IBM Lotus Domino 'nLDAP.exe' Remote Buffer Overflow Vulnerability

IBM Lotus Domino is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user- supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

IBM Lotus Domino Server 'diiop' Multiple RCE Vulnerabilities

IBM Lotus Domino server is prone to multiple remote code-execution vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

(0Day) IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The...