Lucene search
K

7 matches found

securityvulns
securityvulns
added 2011/02/11 12:0 a.m.48 views

ZDI-11-046: IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability

ZDI-11-046: IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-046 February 7, 2011 - This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. To view...

0.8AI score
Exploits0
NVD
NVD
added 2011/02/08 10:0 p.m.22 views

CVE-2011-0918

Stack-based buffer overflow in the NRouter aka Router service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE...

10CVSS8AI score0.10609EPSS
Exploits0References3
Prion
Prion
added 2011/02/08 10:0 p.m.18 views

Stack overflow

Stack-based buffer overflow in the NRouter aka Router service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE...

10CVSS8.6AI score0.10609EPSS
Exploits0References3
CVE
CVE
added 2011/02/08 9:0 p.m.48 views

CVE-2011-0918

CVE-2011-0918 affects IBM Lotus Domino (NRouter/Router service). The issue is a stack-based buffer overflow triggered by long filenames in the Content-ID and ATTACH:CID headers of attachments within malformed calendar-request emails, allowing remote code execution. The root cause is copying heade...

10CVSS8.2AI score0.10609EPSS
Exploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2011/02/07 12:0 a.m.27 views

(0Day) IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NRouter service while transporting malformed e-mails. The vulnerable...

10CVSS5.5AI score0.10609EPSS
Exploits0References1
securityvulns
securityvulns
added 2006/06/28 12:0 a.m.37 views

SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-006 Advisory Title : Lotus Domino SMTP Based Denial of Service Author : Ollie Whitehouse [email protected] Release Date : June 27,...

10CVSS0.2AI score0.13197EPSS
Exploits0
CVE
CVE
added 2006/01/09 11:0 a.m.55 views

CVE-2006-0119

IBM Lotus Domino SMTP server is vulnerable to a denial-of-service via malformed vCal meeting requests. The routing service (nrouter.exe) can be driven to consume 100% CPU, potentially blocking mail delivery. The issue is unauthenticated and can be triggered remotely, with the vulnerability descri...

10CVSS6.8AI score0.13197EPSS
Exploits0References18Affected Software3
Rows per page
Query Builder