CVE-2001-0009

CVE-2001-0009 covers a directory traversal in Lotus Domino web server (5.0.x) allowing remote reading of arbitrary files via a .. path. The vulnerability affects Lotus Domino Server components that implement the HTTP task, enabling access to files outside the web root. Root cause is improper path...

CVE-1999-0729

Buffer overflow in Lotus Notes LDAP NLDAP allows an attacker to conduct a denial of service through the ldapsearch request...

CVE-1999-0729

CVE-1999-0729 corresponds to a buffer overflow in Lotus Notes LDAP (NLDAP) that enables a denial-of-service through the ldap_search request. The linked Red Hat advisory and CVE records confirm the root cause as a buffer overflow and the impact as a DoS, but no specific affected versions, vulnerab...

CVE-2001-0009

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack...

CVE-2001-0130

Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier...

CVE-2001-0130

The CVE-2001-0130 entry describes a buffer overflow in the HTML parser of Lotus Domino components: Lotus R5 Domino Server prior to 5.06 and Domino Client prior to 5.05. The overflow is triggered by a malformed font size specifier and can allow remote attackers to cause a denial of service and pot...

CVE-2001-0260

Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command...

CVE-2001-0260

Buffer overflow in Lotus Domino Mail Server (Lotus Domino R5 SMTP server) versions 5.0.5 and earlier can be triggered by a long RCPT TO command, allowing a remote attacker to crash the server or execute arbitrary code. The vulnerability affects Domino R5 SMTP server with domain restrictions enabl...

def-2001-20: Lotus Domino Multiple DoS

====================================================================== Defcom Labs Advisory def-2001-20 Lotus Domino Multiple DoS Author: Peter Grьndl [email protected] Release Date: 2001-04-11 ======================================================================...

DoS против Lotus Domino Web Server (memory leak)

Утечки памяти при обработке различных полей HTTP-запроса...

CVE-1999-0729

Buffer overflow in Lotus Notes LDAP NLDAP allows an attacker to conduct a denial of service through the ldapsearch request...

CVE-2001-0130

Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier...

IBM Lotus Domino Administration Databases Anonymous Access

The remote Lotus Domino server allows an anonymous user to access sensitive information such as users, databases, configuration of servers including operating system and hard disk partitioning, and logs of access to users which could expose sensitive data if GET html forms are used. %NASLMINLEVEL...

Lotus Domino SMTP Server Allows Anonymous Relay of Quoted Addresses

Overview Lotus Domino includes an SMTP server. Under certain configurations, an intruder may be able to relay mail to third parties through the Domino SMTP server. Description An "open" mail server is one that will send mail that is not addressed to and does not originate from a local user. Open...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

CVE-2001-0009

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack...

Дырка в Lotus Notes (stored foms)

Внутрь письма можно вставить исполняемый код во внутреннем формате...

Lotus Notes Stored Form Vulnerability

Security Advisory: Lotus Notes Stored Form Vulnerability Date: 8th February 2001 Author: Chris Jones aka dp [email protected] Versions Affected: At present only Lotus Notes v4.6 has been tested ---- Exploit Introduction ------------------------------------------ Due to the design flaws of Lotus Not...

Дырка в Lotus Domino

Переполнение буфера при проверке имени получателя...

[SAFER] Security Bulletin 010123.EXP.1.10

S.A.F.E.R. Security Bulletin 010123.EXP.1.10 TITLE : Buffer overflow in Lotus Domino SMTP Server DATE : January 23, 2001 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Lotus Notes/Domino 5 up to and including 5.05 PROBLEM: Buffer overflow exists in Lotus Domino SMTP server, which...