CVE-2004-0029

CVE-2004-0029 affects Lotus Notes Domino 6.0.2 on Linux, where the notes.ini configuration file is installed with world-writable permissions. This enables local users to modify the Notes configuration and potentially gain privileges. The core vulnerability is the insecure file permissions of note...

CVE-2004-0029

Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges...

PT-2004-1244 · Ibm · Lotus Notes & Domino

Name of the Vulnerable Software and Affected Versions: Lotus Notes Domino version 6.0.2 Description: The issue concerns a configuration file, specifically the notes.ini file, which is installed with world-writable permissions on Linux systems. This allows local users to modify the Notes...

CVE-2004-0029: Undefined Security Weakness

Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges...

CVE-2003-1408

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...

Lotus Domino SMTP Server Forged Localhost Mail Header DoS

The remote SMTP server possibly Lotus Domino can be killed or disabled by a malformed message that bounces to itself. The routing loop exhausts all resources. An attacker may use this to crash it continuously. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References Date: Mon, 20 Aug 2001...

Lotus Domino /./ Request Database Locking DoS

It might be possible to lock out some Lotus Domino databases by requesting them through the web interface with a special request containing a '/./' string in the URL path. This attack is only efficient on databases that are not used by the server. Note that no real attack was performed, so this m...

Java Agent freezes Lotus Notes and Domino 6.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, the following agent causes the IBM JVM 1.3.1 shipped with Lotus Domino 6.0.1 and Lotus Notes 6.0.1 to crash. After calling the agent a huge amount of memory is not freed and causes the server machine observed on MS XP to deny further service...

Lotus Notes / Lotus Domino DoS

update method of CRC32 class causes server to hang...

CVE-2003-0178

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via 1 the sViewName option in the PresetFields parameter for iNotes, 2 the Foldername option in the PresetFields parameter for iNotes, or 3 a long Host...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0179

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0179

CVE-2003-0179 describes a buffer overflow in the COM Object Control Handler for Lotus Domino before/including 6.0.1, exploitable via multiple vectors through the iNotes ActiveX control’s InitializeUsingNotesUserName method. The issue allows remote attackers to execute arbitrary code on affected s...

CVE-2003-0178

CVE-2003-0178 affects IBM Lotus Domino Web Server (iNotes) prior to 6.0.1. The vulnerability is a set of buffer overflows caused by improper handling of user-supplied values: (1) s_ViewName and (2) Foldername in the PresetFields parameter for iNotes, and (3) overly long Host headers that get inse...

CVE-2003-0178

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via 1 the sViewName option in the PresetFields parameter for iNotes, 2 the Foldername option in the PresetFields parameter for iNotes, or 3 a long Host...

CVE-2003-0179

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0181

CVE-2003-0181 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1. The vulnerability stems from processing a POST request in the s_Validation form with a long, unknown parameter name, enabling remote attackers to cause a denial of service. Impact is denial of service (availability) with no...

CVE-2003-0180

CVE-2003-0180 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1, with a denial-of-service condition via an incomplete POST request (as demonstrated by h_PageUI form). OpenVAS entries corroborate a related HTTP/1.1 header overflow vector that could crash the web server and, in some descri...