CVE-2002-2025

Lotus Domino Server 5.0.9a - Denial of Service via HTTP Requests for MS-DOS Device Names

Title source: llm

Description

Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.

References (6)

Core 6

Core References

Patch, Vendor Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0037.html

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4020

Various Sources x_refsource_confirm

http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/945e97608fda942a85256b37007905b1?OpenDocument&Highlight=0%2CJCHN547JWV

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4019

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/253830

Various Sources x_refsource_confirm

http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/a77f8a5132cce70085256b8000792112?OpenDocument&Highlight=0%2CJCHN4UMKLA

Scores

EPSS 0.0175

EPSS Percentile 75.6%

Details

Status published

Products (14)

ibm/lotus_domino_server 4.6.1

ibm/lotus_domino_server 4.6.3

ibm/lotus_domino_server 4.6.4

ibm/lotus_domino_server 5.0

ibm/lotus_domino_server 5.0.1

ibm/lotus_domino_server 5.0.2

ibm/lotus_domino_server 5.0.3

ibm/lotus_domino_server 5.0.4

ibm/lotus_domino_server 5.0.5

ibm/lotus_domino_server 5.0.6

... and 4 more

Published Dec 31, 2002

Tracked Since Feb 18, 2026