Vulnerability Note VU#927988

IBM Lotus Domino LDAP server DN message heap buffer overflow

Overview

The IBM Lotus Domino LDAP server is vulnerable to a heap buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service.

I. Description

IBM Lotus Domino server software provides email, calendar, scheduling, and collaboration services. The LDAP component of Lotus Domino is vulnerable to a heap buffer overflow if it handles a DN (Distinguished Name) message with a string larger than 65535 bytes.

II. Impact

A remote, unauthenticated attacker may be able to execute arbitrary code with the privileges of the LDAP server component or cause a denial of service.

III. Solution

Apply an update

This issue is addressed in Lotus Domino 7.0.2 Fix Pack 1 (FP1) and 6.5.6., as specified in IBM Technote 1257248.

Block or restrict access

Block or restrict access to the Lotus Domino LDAP service (typically 389/tcp) from untrusted networks such as the internet.

Systems Affected

Vendor	Status	Date Notified	Date Updated
IBM Corporation	Vulnerable	28-Mar-2007

References

http://www-1.ibm.com/support/docview.wss?uid=swg21257248
http://secunia.com/advisories/24633/

Credit

This vulnerability was reported by iDefense Labs, who in turn credit an anonymous discoverer.

This document was written by Will Dormann.

Other Information

Date Public:	2007-03-28
Date First Published:	2007-03-28
Date Last Updated:	2007-03-28
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Metric:	8.60
Document Revision:	5

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Produced 2007 by US-CERT, a government organization
Disclaimers and copyright information

Get Adobe Reader