CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2000-1215

The default configuration of Lotus Domino server 5.0.8 includes system information version, operating system, and build date in the HTTP headers of replies, which allows remote attackers to obtain sensitive information...

CVE-2000-1215

The CVE-2000-1215 entry concerns Lotus Domino server 5.0.8 in its default configuration, which exposes system information (version, operating system, and build date) in HTTP response headers. This represents an information-disclosure vulnerability that can allow remote attackers to glean sensitiv...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

CVE-2005-1101

Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via large amounts of data in certain 1 time or 2 date fields...

CVE-2005-1101

CVE-2005-1101 concerns Lotus Domino Server versions 6.0.5 and 6.5.4 with a buffer overflow in certain time/date fields exposed via remote input. The Nessus plugin describes a remote overflow triggered by large data in POST-like requests, potentially crashing the web server and possibly allowing a...

Remote Buffer Overflow in Lotus Domino

Mark Litchfield of NGSSoftware has discovered a high risk vulnerability in Lotus Domino Server. Versions affected include: Domino 6.0.5 Domino 6.5.4 The flaw permits execution of arbitrary code via a maliciously crafted POST request. Internal research has discovered to date, 6 attack vectors. Thi...

Lotus Notes, Lotus Domino multiple vulnerabilities

Buffer overflows, format string bugs, crossite scripting...

[SA14879] Lotus Notes/Domino Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Lotus Notes/Domino Multiple Vulnerabilities SECUNIA...

IBM Lotus Domino Web Service NLSCCSTR.DLL Malformed GET Request Overflow DoS

The remote host is running a version of Lotus Domino Server's web service that is affected by a denial of service vulnerability. By sending a specially crafted HTTP request with a long string of unicode characters, a remote attacker can crash the nHTTP.exe process, denying service to legitimate...

Lotus Domino Web server DoS

Large number of unicode 430 characters in URL causes stack overrun...

Lotus Domino Server < 6.5.3 Web Service Remote DoS

Binary data 2800.prm...

CVE-2005-0986

NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service deep recursion and nHTTP.exe process crash via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be...

CVE-2005-0986

IBM Lotus Domino Server web service (NLSCCSTR.DLL) is vulnerable to a remote denial-of-service via a crafted GET request. A long request containing a Unicode value of 430 characters can trigger deep recursion and crash the nHTTP.exe process, exhausting the stack. Affected products include Lotus D...

iDEFENSE Security Advisory 04.06.05: IBM Lotus Domino Server Web Service DoS Vulnerability

IBM Lotus Domino Server Web Service DoS Vulnerability iDEFENSE Security Advisory 04.06.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 6, 2005 I. BACKGROUND IBM Lotus Domino Server software provides messaging, calendaring and scheduling capabilities on a variety of...

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network...

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service

source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network requests. IBM has denied that this issue is a vulnerability and they ha...

CVE-2005-0921

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...

CVE-2005-0921

CVE-2005-0921 affects Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0. The vulnerability allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. The NVD metrics show a CVSS v2 base score of 4.6 (medium), with local at...

CVE-2002-1624

CVE-2002-1624 refers to a buffer overflow in the Lotus Domino web server prior to R5.0.10 when logging to DOMLOG.NSF. The vulnerability can be triggered by a long HTTP Authenticate header containing certain non-ASCII characters, allowing a remote attacker to cause a denial of service and potentia...