CVE-2001-1313

Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2002-0245

CVE-2002-0245 affects Lotus Domino server 5.0.8 with NoBanner enabled. The vulnerability enables two information disclosures: (1) by requesting a non-existent file with a .pl extension, an error message reveals the server’s physical path; (2) any request that triggers an HTTP 500 error leaks the ...

CVE-2002-0245

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to 1 determine the physical path of the server via a request for a nonexistent file with a .pl Perl extension, which leaks the pathname in the error message, or 2 make any request that causes an HTTP 500 error, which leaks th...

CVE-2001-1311

Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1311

CVE-2001-1311 refers to buffer overflows in Lotus Domino R5 pre-5.0.7a that allow a remote attacker to cause a denial of service and potentially execute arbitrary code, demonstrated by the PROTOS LDAPv3 test suite. The vulnerability affects Domino R5.0.7 and earlier versions, with remediation doc...

CVE-2001-1312

The CVE-2001-1312 issue affects Lotus Domino R5 prior to version 5.0.7a, where LDAP handling code contains format string vulnerabilities. Exploitation could cause remote denial of service and, potentially, arbitrary code execution, as demonstrated by the PROTOS LDAPv3 test suite. The CERT advisor...

CVE-2001-1313

The CVE-2001-1313 entry refers to Lotus Domino R5 before R5.0.7a, where LDAP handling code vulnerabilities allow a remote attacker to crash the server and potentially execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite. T...

[NEWS] Lotus Domino Bindsock PATH Buffer Overflow Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

[NEWS] Lotus Domino Bindsock Arbitrary File Creation Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

CVE-2001-1313: Undefined Security Weakness

Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2002-0245: Undefined Security Weakness

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to 1 determine the physical path of the server via a request for a nonexistent file with a .pl Perl extension, which leaks the pathname in the error message, or 2 make any request that causes an HTTP 500 error, which leaks th...

CVE-2001-1311: Undefined Security Weakness

Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1312: Undefined Security Weakness

Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

[NEWS] Lotus Domino Bindsock Notes_ExecDirectory Buffer Overflow Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

Multiple local bugs in Lotus Domino

No description provided...

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call NSFDbReadObject that directly accesses the object...

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call NSFDbReadObject that directly accesses the object...

CVE-2002-0037

CVE-2002-0037 affects Lotus Domino/Notes prior to R5.0.10. The vulnerability allows an attacker to bypass the intended Reader and Author access lists for a document’s object by using the NSFDbReadObject API call that directly accesses the object, potentially exposing object data despite document ...

CVE-2002-0037: Undefined Security Weakness

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call NSFDbReadObject that directly accesses the object...

KPMG-2002006: Lotus Domino Physical Path Revealed

-------------------------------------------------------------------- -=Lotus Domino Physical Path Revealed=- courtesy of KPMG Denmark BUG-ID: 2002006 Released: 02nd Apr 2002 -------------------------------------------------------------------- Problem: ======== Due to problems handling Windows DOS...