IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)

$Id: dominohttpacceptlanguage.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IBM Lotus Domino Web Server Accept-Language Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'IBM...

IBM Lotus Domino Web服务器Accept Language HTTP头栈溢出漏洞

BUGTRAQ ID: 29310 CVECAN ID: CVE-2008-2240 Lotus Domino是集电子邮件、文档数据库、快速应用开发技术以及Web技术为一体的电子邮件与群集平台。 Lotus Domino Web服务器中负责处理HTTP头的代码存在栈溢出漏洞，Accept Language字段是直接从请求的HTTP头中获得的，然后使用strcpy函数拷贝到了固定长度的栈缓冲区中，因此远程攻击者可以通过包含有GET方式的HTTP 1.1请求覆盖栈缓冲区，导致执行任意指令。 IBM Lotus Domino 8.0 IBM Lotus Domino 7.0 IBM Lotus...

Immunity Canvas: LOTUS_DOMINO_HTTP

Name| lotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| CANVAS Description| Lotus Domino 8.0.0 HTTP Server - Accept-Language Overflow Notes| References: http://osvdb.org/show/osvdb/45415 CVE Name: CVE-2008-2240 VENDOR: IBM Notes: Repeatability: One-Shot Date public: 05/20/2008 CVE Url:...

DSquare Exploit Pack: D2SEC_LOTUS_DOMINO_HTTP

Name| d2seclotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino Web Server Accept-Language HTTP Header Buffer Overflow Vulnerability Notes|...

CVE-2008-2240

CVE-2008-2240 : IBM Lotus Domino Web Server before 7.0.3 FP1 and 8.x before 8.0.1 is vulnerable to a stack-based buffer overflow triggered by a long Accept-Language HTTP header, allowing remote access to cause a daemon crash or potentially execute arbitrary code. Affected products/versions: Lotus...