Description
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
References (4)
Core 4
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6646
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11058
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/772563
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1004052
Scores
EPSS
0.0414
EPSS Percentile
89.8%
Details
Status
published
Products (14)
ibm/lotus_domino
5.0
ibm/lotus_domino
5.0.1
ibm/lotus_domino
5.0.2
ibm/lotus_domino
5.0.3
ibm/lotus_domino
5.0.4
ibm/lotus_domino
5.0.4a
ibm/lotus_domino
5.0.5
ibm/lotus_domino
5.0.6
ibm/lotus_domino
5.0.6a
ibm/lotus_domino
5.0.7
... and 4 more
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026