Lotus Notes / Lotus Domino DoS

update method of CRC32 class causes server to hang...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0178

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via 1 the sViewName option in the PresetFields parameter for iNotes, 2 the Foldername option in the PresetFields parameter for iNotes, or 3 a long Host...

CVE-2003-0179

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0179

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0178

CVE-2003-0178 affects IBM Lotus Domino Web Server (iNotes) prior to 6.0.1. The vulnerability is a set of buffer overflows caused by improper handling of user-supplied values: (1) s_ViewName and (2) Foldername in the PresetFields parameter for iNotes, and (3) overly long Host headers that get inse...

CVE-2003-0180

CVE-2003-0180 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1, with a denial-of-service condition via an incomplete POST request (as demonstrated by h_PageUI form). OpenVAS entries corroborate a related HTTP/1.1 header overflow vector that could crash the web server and, in some descri...

CVE-2003-0178

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via 1 the sViewName option in the PresetFields parameter for iNotes, 2 the Foldername option in the PresetFields parameter for iNotes, or 3 a long Host...

CVE-2003-0179

CVE-2003-0179 describes a buffer overflow in the COM Object Control Handler for Lotus Domino before/including 6.0.1, exploitable via multiple vectors through the iNotes ActiveX control’s InitializeUsingNotesUserName method. The issue allows remote attackers to execute arbitrary code on affected s...

CVE-2003-0181

CVE-2003-0181 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1. The vulnerability stems from processing a POST request in the s_Validation form with a long, unknown parameter name, enabling remote attackers to cause a denial of service. Impact is denial of service (availability) with no...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino Original release date: March 26, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Lotus Notes and Domino versions...

CVE-2003-0123

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service crash via a long HTTP status line...

IBM Lotus Notes Detection

The remote service supports the Notes Remote Procedure Call protocol, which is used by Lotus Notes and Lotus Domino to communicate with other servers. C Tenable Network Security, Inc. This plugin positively identifies notes-to-notes communication on top of port 1352 include"compat.inc"; if...

IBM Lotus Domino 6.0 Multiple Vulnerabilities

The remote Lotus Domino server, according to its version number, is vulnerable to various buffer overflow and denial of service attacks. An attacker may use these to disable this server or execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This fla...

R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0012 Lotus Notes/Domino R6-beta PROTOS LDAP Deni...

R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0010 Buffer Overflow in Lotus Notes Protocol...

Lotus Domino Server susceptible to a pre-authentication buffer overflow during Notes authentication

Overview Lotus Domino is vulnerable to a pre-authentication buffer overflow attack during Notes authentication. Description A buffer overflow vulnerability may be exploited during Notes authentication to a Lotus Domino server. Versions prior to 5.0.12 and 6.0 are affected. According to the Rapid7...