CVE-2003-0180

IBM Lotus Domino Web Server - Denial of Service via Incomplete POST Request

Title source: llm

Description

Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.

References (8)

Core 8

Core References

Exploit, Patch, Vendor Advisory x_refsource_misc

http://www.nextgenss.com/advisories/lotus-60dos.txt

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2003-11.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11360

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/6951

Various Sources x_refsource_confirm

http://www-1.ibm.com/support/docview.wss?uid=swg21104528

Third Party Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html

Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac

http://www.ciac.org/ciac/bulletins/n-065.shtml

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/355169

Scores

EPSS 0.0300

EPSS Percentile 86.0%

Details

Status published

Products (1)

ibm/lotus_domino_web_server 6.0

Published Apr 02, 2003

Tracked Since Feb 18, 2026