Lotus Domino IMAP CRAM-MD5 authentication buffer overflow

Added: 04/23/2007 CVE: CVE-2007-1675 BID: 23172 OSVDB: 34091 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in the CRAM-MD5 authentication function in the Lotus Domino IMAP service allows remote attackers to...

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow (CVE-2007-1675)

...

Immunity Canvas: DOMINO_CRAM

Name| dominocram ---|--- CVE| CVE-2007-1675 Exploit Pack| CANVAS Description| Lotus Domino IMAP4 Server CRAM-MD5 Stack Overflow Notes| CVE Name: CVE-2007-1675 VENDOR: IBM VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-07-011.html CVE Url:...

CVE-2007-1675

A buffer overflow vulnerability exists in the CRAM-MD5 authentication mechanism of the IBM Lotus Domino IMAP server (nimap.exe ). The software fails to validate the length of the supplied username, allowing an unauthenticated remote attacker to provide a username exceeding 256 bytes to cause a de...