2465 matches found
R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0011 Lotus Notes/Domino Web Retriever HTTP Statu...
IBM Lotus Domino < 5.0.12 / 6.0.1 Multiple Vulnerabilities
The remote Lotus Domino server, according to its version number, is affected by various buffer overflows affecting it when it acts as a client through webretriever or in LDAP. An attacker may use these to disable this server or execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C...
IBM Lotus Domino Directory Traversal Arbitrary File Access
It is possible to read arbitrary files on the remote server by prepending %00%00.nsf/../ in front of it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11344; scriptversion"1.26";...
Lotus Domino Web Server vulnerable to denial of service via incomplete POST request
Overview Lotus Domino Web Server is an application that provides access to Lotus Notes databases via HTTP requests. A vulnerability exists that could permit a remote attacker to cause a denial-of-service situation for HTTP requests. Description Lotus Domino Web Server contains a vulnerability in...
Lotus Domino Web Server vulnerable to buffer overflow via non-existent "h_SetReturnURL" parameter with an overly long "Host Header" field
Overview Lotus Domino Web Server is an application that provides access to Lotus Notes databases via HTTP requests. A vulnerability exists that could permit a remote attacker to execute arbitrary code on the server. Description Lotus Domino Web Server contains a vulnerability in the nhttp.exe...
Lotus Notes and Domino COM Object Control Handler contains buffer overflow
Overview Lotus Notes is a client application that provides access to Lotus Domino servers. A vulnerability exists that could permit a remote attacker to cause a user to execute arbitrary code. Description A buffer overflow vulnerability exists in the in both Lotus Notes clients and Domino Servers...
Lotus iNotes vulnerable to buffer overflow via PresetFields s_ViewName field
Overview Lotus iNotes contains a buffer overflow that could permit a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable server. Description Lotus iNotes Web Access is a web-based database application that provides "access to corporate messaging services and...
Lotus iNotes vulnerable to buffer overflow via PresetFields FolderName field
Overview Lotus iNotes contains a buffer overflow that could permit a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable server. Description Lotus iNotes Web Access is a database application that provides "access to corporate messaging services and personal...
Multiple serious bugs in Lotus Domino
Bugs in server and client components, including remote buffer overflows...
Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability Systems Affected: Release 6.0 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date:...
Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Server iNotes Overflow Systems Affected: Release 6.0 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date: 17th February 2003 Advisory...
Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)
NGSSoftware Insight Security Research Advisory Name: Lotus iNotes Client ActiveX Control Buffer Overrun Systems Affected: Release 6.0 Severity: Medium Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date: 17th February 2003...
IBM Lotus Domino HTTP Redirect Buffer Overflow Vulnerability
...
Lotus Domino Source code disclosue
Additional dot in URL allows page source code access...
Lotus Domino DOT Bug Allows for Source Code Viewing
Through some testing against some Lotus Domino web servers verified in version 5 & 6, if you append a period to the end of a non-default Lotus file type non .NSF, .NTF, etc via your browser URL request, you will be prompted to download the file. This has a possible repercussion of the ability to...
Lotus Domino web server vulnerable to buffer overflow via long HTTP authentication header containing non-ASCII characters
Overview A remotely exploitable buffer overflow exists in versions of IBM's Lotus Domino web server prior to R5.0.10. Description A remotely exploitable buffer overflow exists in the Lotus Domino web server. The overflow can occur as the result of an overly long HTTP Authenticate header containin...
DSquare Exploit Pack: D2SEC_DOMINOR5
Name| d2secdominor5 ---|--- CVE| CAN-2002-1624 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino HTTP Authentication Logging Stack Overflow Notes|...
CVE-2002-1624
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters...
CVE-2002-2025
Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for 1 an MS-DOS device name and 2 an MS-DOS device name with a large number of characters appended to the device name...
CVE-2002-2014
Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks...