170 matches found
CVE-2001-1504
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message...
Lotus Domino R5 Server vulnerable to DoS via nmap RPC scan on port 443/tcp
Overview Versions earlier than 5.0.9 of Lotus Domino R5 Servers with Secure Socket Layer SSL enabled are vulnerable to a denial of sevice. Description A remote user is able to crash the HTTP serving process on any Lotus Domino R5 Server using the nmap utility. Sending a request to port 443, the...
CVE-2001-0695
CVE-2001-0695 : WFTPD 3.00 R5 is vulnerable to a remote denial-of-service caused by repeated requests to change directory to the floppy drive (A:). The description indicates a network-accessible condition with low attack complexity and no authentication required, leading to partial availability i...
CVE-2001-0601
CVE-2001-0601 affects Lotus Domino R5 before 5.0.7. The vulnerability allows a remote attacker to cause a denial of service by sending HTTP requests that contain certain combinations of UNICODE characters. The DoS is related to availability impact and is described as partial. Root cause is proces...
CVE-2001-0604
CVE-2001-0604 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to induce a denial of service by sending URL requests (>8 KB) containing a large number of '/' characters. The issue is due to how such requests are processed, enabling a partial availability impac...
CVE-2001-0600
CVE-2001-0600 affects Lotus Domino R5 prior to 5.0.7. The vulnerability allows a remote attacker to cause a denial-of-service by making repeated URL requests using the same HTTP headers (e.g., Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type). The issue is documented by NVD ...
CVE-2001-0603
CVE-2001-0603 affects Lotus Domino R5 prior to 5.0.7. The vulnerability permits a remote attacker to cause a denial-of-service by repeatedly sending large data (>10 KB) to the DIIOP-CORBA service over TCP port 63148. The NVD entry provides a basic impact assessment (availability impact) and a ...
CVE-2001-0602
CVE-2001-0602 affects Lotus Domino R5 prior to 5.0.7, where a remote attacker can cause a denial of service by sending repeated URL requests (>400) to DOS devices. The vulnerability is evidenced by multiple sources in the connected documents, which describe the same impact class for Domino R5
CVE-2001-0600
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as 1 Accept, 2 Accept-Charset, 3 Accept-Encoding, 4 Accept-Language, and 5 Content-Type...
Lotus Domino Server R5 vulnerable to Cross-Site Scripting via passing of user input directly to default error page
Overview Lotus Domino R5 Servers are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on unvalidated input from untrustworthy sources. This can be a problem...
Lotus Domino R5 Server Family contains multiple vulnerabilities in LDAP handling code
Overview The Lotus Domino R5 Server Family contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this...
WFTPD v3.00 R5 Directory Traversal
I already posted another way, but this one might work in different situations and is not limited to win9x/ME WFTPD v3.00 R5 Directory Traversal AFFECTED SYSTEMS WFTPD v3.00 R5 DESCRIPTION Let's quote the manual on how the .lnk feature is supposed to work : "File Security Note that since version...
CVE-2001-0130
The CVE-2001-0130 entry describes a buffer overflow in the HTML parser of Lotus Domino components: Lotus R5 Domino Server prior to 5.06 and Domino Client prior to 5.05. The overflow is triggered by a malformed font size specifier and can allow remote attackers to cause a denial of service and pot...
CVE-2001-0130
Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier...
CVE-2000-1153
PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1155
RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request...
CVE-2000-1151
Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1150
Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1151
CVE-2000-1151 affects the Baxter IRC client on BeOS r5 Pro and earlier. The issue is a remote denial-of-service triggered by a message containing a long URL, with no additional exploit details or remedial steps provided in the accompanying documents.