Lotus Domino Server Security Vulnerabilities and Issues — Lotus Domino Server CVE List

Lucene search

IbmLotus Domino Server

8 matches found

CVE•added 2010/01/25 7:30 p.m.•82 views

CVE-2008-7253

The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE...

4.3CVSS6.2AI score0.39542EPSS

CVE•added 2006/02/08 1:2 a.m.•68 views

CVE-2006-0580

IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP).

5CVSS6.3AI score0.07086EPSS

CVE•added 2005/07/14 4:0 a.m.•50 views

CVE-2001-1567

Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by ...

5CVSS6.8AI score0.00394EPSS

CVE•added 2005/05/02 4:0 a.m.•46 views

CVE-2005-0986

NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be...

5CVSS6.5AI score0.17706EPSS

CVE•added 2002/04/22 4:0 a.m.•45 views

CVE-2002-0037

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

7.5CVSS6.5AI score0.00597EPSS

CVE•added 2001/05/07 4:0 a.m.•41 views

CVE-1999-0729

Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.

5CVSS7.1AI score0.00506EPSS

CVE•added 2005/05/02 4:0 a.m.•41 views

CVE-2005-1101

Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields.

7.5CVSS8AI score0.0411EPSS

CVE•added 2005/07/14 4:0 a.m.•33 views

CVE-2002-2025

Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.

5CVSS7AI score0.01434EPSS