Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3 / Mail Server 5.0.1/5.0.2/5.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' and 'soml from' commands in the ESMTP service of Lotus Domino Server has an unchecked buffer. If Lotus...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0023

The CVE-2000-0023 issue affects the Lotus Domino HTTP server, where a buffer overflow in URL processing can be exploited by remote attackers to cause a denial of service by sending a long URL (notably via long /cgi-bin relative URLs). The Nessus plugin for this CVE corroborates a DoS impact from ...

CVE-2000-0023

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0022

Technical details about CVE-2000-0022 are not publicly provided in the supplied documents. Monitor for updates from referenced sources; only the basic description about Lotus Domino CGI-bin anonymous access is available.

CVE-2000-0021

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...

CVE-2000-0021

The CVE describes an information-disclosure issue in IBM/Lotus Domino HTTP Server: an attacker can remotely determine the real path of the server by requesting a non-existent script under /cgi-bin. Affected component is the Domino HTTP server and the vulnerability stems from how it handles reques...

CVE-2000-0023

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

IBM Lotus Domino HTTP /cgi-bin Relative URL Request DoS

It was possible to perform a denial of service against the remote web server by sending it a long /cgi-bin relative URL. This problem allows an attacker to prevent your Lotus Domino web server from handling requests. %NASLMINLEVEL 70300 This script was written by Alain Thivillon See the Nessus...

IBM Lotus Domino HTTP Server Filesystem Setup Disclosure

It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2000-0021

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...

lotus.notes.mail.crypto.txt

Date: Tue, 23 Mar 1999 18:57:23 +0100 From: Martin Bartosch To: [email protected] Security advisory Advisory released Mar 23 1999 ----- Application: Lotus Notes Client Version 4.5, probably others Impact: Encrypted mail sent from the Notes client may traverse the network in the clear and may b...

lotus-notes-smtp-DoS.txt

Date: Fri, 15 Jan 1999 00:52:53 PST From: Siva Sankar Adiraju To: [email protected] Subject: Lotus Notes SMTP Server bug There is a security bug in IBM's Lotus Notes SMTP server. eg. An SMTP session: helo a 250 notes.foo.com helo b 500 Session already established. The domain name b passed in...

lotus.notes.relay.txt

Date: Mon, 14 Jun 1999 17:40:35 +0100 From: Robert Lister To: [email protected] Subject: Lotus Notes Relay Following postings about NTMail having open relaying ability, in certain situations I have identified a problem with the Lotus SMTP MTA right up to v4.6.4, have yet to test...

lotus.notes.time.txt

Lotus Notes Locations & DST Thomas Zehetbauer [email protected] Thu, 8 Apr 1999 12:25:08 +0200 --HlL+5n6rz5pIUxbD Content-Type: text/plain; charset=us-ascii Lotus Notes may under some circumstances silently change the System time. This happend here with "Location"="Office Network", "Local ti...

domino3.txt

L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: October 9th, 1998 Application: Lotus Domino Severity: Web users can retrieve sensitive data in many Domino based Internet applications Author: [email protected] Operating Sys: All platforms...

lotus.notes.crypto.txt

Date: Fri, 26 Mar 1999 21:25:10 GMT From: KevinLynch/CAM/[email protected] To: [email protected] Subject: Re: Lotus Notes security advisory Security Advisory Application: Lotus Notes Client R4.5 and Later Summary: As reported March 23, 1999 by Martin Bartosch of Deutsche Bank AG, there is a bug ...

domino-notes.txt

''''''''''''''''''''''''''''''''''''' L0pht Security Advisory URL Origin: http://www.l0pht.com/advisories.html Release Date: July 31, 1998 Application: Notes 4.6+ Client Operating Sys: Any Severity: Users can overwrite/create system files Author: nny Patch Status: Lotus has been made aware of thi...

IBM Lotus Domino ?open Forced Directory Listing

It is possible to browse the remote web server directories by appending '?open' to the end of the URL. For example : http://www.example.com/?open Data that can be accessed by unauthorized users may include usernames, server names and IP addresses, dial-up server phone numbers, administration logs...