CVE-2003-0181

Lotus Domino Web Server - Denial of Service via Long Parameter Name in Fictionary Value Field POST Request

Title source: llm

Description

Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.

References (6)

Core 6

Core References

Exploit, Patch, Vendor Advisory x_refsource_misc

http://www.nextgenss.com/advisories/lotus-60dos.txt

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2003-11.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/6951

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11361

Various Sources x_refsource_confirm

http://www-1.ibm.com/support/docview.wss?uid=swg21104528

Third Party Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html

Scores

EPSS 0.0246

EPSS Percentile 82.8%

Details

Status published

Products (1)

ibm/lotus_domino_web_server 6.0

Published Apr 02, 2003

Tracked Since Feb 18, 2026