A remotely exploitable buffer overflow exists in versions of IBM's Lotus Domino web server prior to R5.0.10.
A remotely exploitable buffer overflow exists in the Lotus Domino web server. The overflow can occur as the result of an overly long HTTP Authenticate header containing certain non-ASCII characters. For more information, please see the IBM Technote.
An intruder can execute arbitrary code with the privileges of the Lotus Domino web server.
Upgrade to R5.0.10 or later.
Log to text files instead of domlog.nsf.
This vulnerability was discovered by The Relay Group.
This document was written by Ian A. Finlay.
|Date First Published:||2003-01-13|
|Date Last Updated:||2003-01-13 15:28 UTC|