CVE-2003-0180

CVE-2003-0180 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1, with a denial-of-service condition via an incomplete POST request (as demonstrated by h_PageUI form). OpenVAS entries corroborate a related HTTP/1.1 header overflow vector that could crash the web server and, in some descri...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0179

CVE-2003-0179 describes a buffer overflow in the COM Object Control Handler for Lotus Domino before/including 6.0.1, exploitable via multiple vectors through the iNotes ActiveX control’s InitializeUsingNotesUserName method. The issue allows remote attackers to execute arbitrary code on affected s...

CVE-2003-0181

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0178: Undefined Security Weakness

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via 1 the sViewName option in the PresetFields parameter for iNotes, 2 the Foldername option in the PresetFields parameter for iNotes, or 3 a long Host...

CVE-2003-0179: Undefined Security Weakness

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0181: Undefined Security Weakness

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the sValidation form with a long, unknown parameter name...

CVE-2003-0180: Undefined Security Weakness

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino Original release date: March 26, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Lotus Notes and Domino versions...

CVE-2003-0123

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service crash via a long HTTP status line...

IBM Lotus Notes Detection

The remote service supports the Notes Remote Procedure Call protocol, which is used by Lotus Notes and Lotus Domino to communicate with other servers. C Tenable Network Security, Inc. This plugin positively identifies notes-to-notes communication on top of port 1352 include"compat.inc"; if...

IBM Lotus Domino 6.0 Multiple Vulnerabilities

The remote Lotus Domino server, according to its version number, is vulnerable to various buffer overflow and denial of service attacks. An attacker may use these to disable this server or execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This fla...

R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0010 Buffer Overflow in Lotus Notes Protocol...

R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0012 Lotus Notes/Domino R6-beta PROTOS LDAP Deni...

R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0011 Lotus Notes/Domino Web Retriever HTTP Statu...

Lotus Domino Server susceptible to a pre-authentication buffer overflow during Notes authentication

Overview Lotus Domino is vulnerable to a pre-authentication buffer overflow attack during Notes authentication. Description A buffer overflow vulnerability may be exploited during Notes authentication to a Lotus Domino server. Versions prior to 5.0.12 and 6.0 are affected. According to the Rapid7...

IBM Lotus Domino Directory Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending %00%00.nsf/../ in front of it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11344; scriptversion"1.26";...

IBM Lotus Domino < 5.0.12 / 6.0.1 Multiple Vulnerabilities

The remote Lotus Domino server, according to its version number, is affected by various buffer overflows affecting it when it acts as a client through webretriever or in LDAP. An attacker may use these to disable this server or execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C...

Lotus Domino Web Server vulnerable to denial of service via incomplete POST request

Overview Lotus Domino Web Server is an application that provides access to Lotus Notes databases via HTTP requests. A vulnerability exists that could permit a remote attacker to cause a denial-of-service situation for HTTP requests. Description Lotus Domino Web Server contains a vulnerability in...

Lotus Domino Web Server vulnerable to buffer overflow via non-existent "h_SetReturnURL" parameter with an overly long "Host Header" field

Overview Lotus Domino Web Server is an application that provides access to Lotus Notes databases via HTTP requests. A vulnerability exists that could permit a remote attacker to execute arbitrary code on the server. Description Lotus Domino Web Server contains a vulnerability in the nhttp.exe...