Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow (CVE-2007-1675)

...

Immunity Canvas: DOMINO_CRAM

Name| dominocram ---|--- CVE| CVE-2007-1675 Exploit Pack| CANVAS Description| Lotus Domino IMAP4 Server CRAM-MD5 Stack Overflow Notes| CVE Name: CVE-2007-1675 VENDOR: IBM VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-07-011.html CVE Url:...

CVE-2007-1675

IBM Lotus Domino IMAP Server (nimap.exe) is affected by CVE-2007-1675 due to a buffer overflow in the CRAM-MD5 authentication path. The issue allows remote attackers to cause a denial of service by sending a long username. Affected versions are Domino before 6.5.6 and 7.x before 7.0.2 FP1; remedi...