CVE-2002-0086

Lotus Domino 5.0.4 and 5.0.7 - Buffer Overflow via Long Environment Variables

Title source: llm
STIX 2.1

Description

Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8585
Patch, Vendor Advisory x_refsource_misc
http://www.esecurityonline.com/advisories/eSO4124.asp
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21100441
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21095569
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4319
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8583
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4317
Patch, Vendor Advisory x_refsource_misc
http://www.esecurityonline.com/advisories/eSO4126.asp

Scores

EPSS 0.0043
EPSS Percentile 35.2%

Details

Status published
Products (2)
ibm/lotus_domino 5.0.4
ibm/lotus_domino 5.0.7
Published Mar 15, 2002
Tracked Since Feb 18, 2026