Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER

Maybe this is a configuration error in the server where I tryed this but anyway here is the message that I sent : helo xpto.pt mail from: non-existant-user@ipadressoflotusserver mail to : non-existant-user data testing123 . So Lotus Notes SMTP Server now will loop forever trying to tell to the...

Дырки в Lotus Domino

Классическое переполнение буфера в SMTP-команде MAIL FROM: при буфере свыше 4Kb. Кроме того, в конфигурации по-умолчанию документы могут быть модифицированы через Web-сервер. Кроме того, возможна DoS атака против почтового сервера, при посылке письма с одного несуществующего адреса на другой...

Black Watch Labs Vulnerability Alert

Dear Security Professional, The following vulnerability: "Lotus Domino Server Misconfiguration – Documents Can Be Modified over the Web" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black...

Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl))

Not much to say. While performing basic input validation checks in Lotus Domino ESMTP service see subject running on the top of Windows NT system this applies probably to other platforms as well, within approximately 30 seconds we found remote buffer overflow leading to system crash and, if...

CVE-2000-0452

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' an...

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3 / Mail Server 5.0.1/5.0.2/5.0.3 - Remote Buffer Overflow

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' and 'soml from' commands in the ESMTP service of Lotus Domino Server has an unchecked buffer. If Lotus...

CVE-2000-0022

Technical details about CVE-2000-0022 are not publicly provided in the supplied documents. Monitor for updates from referenced sources; only the basic description about Lotus Domino CGI-bin anonymous access is available.

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0023

The CVE-2000-0023 issue affects the Lotus Domino HTTP server, where a buffer overflow in URL processing can be exploited by remote attackers to cause a denial of service by sending a long URL (notably via long /cgi-bin relative URLs). The Nessus plugin for this CVE corroborates a DoS impact from ...

CVE-2000-0023

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0022: Undefined Security Weakness

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0023: Undefined Security Weakness

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0021

The CVE describes an information-disclosure issue in IBM/Lotus Domino HTTP Server: an attacker can remotely determine the real path of the server by requesting a non-existent script under /cgi-bin. Affected component is the Domino HTTP server and the vulnerability stems from how it handles reques...

CVE-2000-0021

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...

CVE-2000-0021: Undefined Security Weakness

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0023

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL...

IBM Lotus Domino HTTP Server Filesystem Setup Disclosure

It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

IBM Lotus Domino HTTP /cgi-bin Relative URL Request DoS

It was possible to perform a denial of service against the remote web server by sending it a long /cgi-bin relative URL. This problem allows an attacker to prevent your Lotus Domino web server from handling requests. %NASLMINLEVEL 70300 This script was written by Alain Thivillon See the Nessus...