CVE-2003-0122

IBM Lotus Domino - Buffer Overflow via NotesRPC Authentication

Title source: llm
STIX 2.1

Description

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

References (9)

Core 9
Core References
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.cert.org/advisories/CA-2003-11.html
Broken Link third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/n-065.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11526
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html
Not Applicable x_refsource_misc
http://www.rapid7.com/advisories/R7-0010.html
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/433489
Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/7037
Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104757319829443&w=2

Scores

EPSS 0.1011
EPSS Percentile 95.2%

Details

Status published
Products (29)
ibm/lotus_domino 4.6.1
ibm/lotus_domino 4.6.3
ibm/lotus_domino 4.6.4
ibm/lotus_domino 5.0
ibm/lotus_domino 5.0.1
ibm/lotus_domino 5.0.2
ibm/lotus_domino 5.0.3
ibm/lotus_domino 5.0.4
ibm/lotus_domino 5.0.4a
ibm/lotus_domino 5.0.5
... and 19 more
Published Mar 18, 2003
Tracked Since Feb 18, 2026