CVE-2011-0913

IBM Lotus Domino < 8.5.3 - Remote Code Execution via DIIOP GIOP getEnvironmentString Request

Title source: llm

Description

Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.

References (3)

Core 3

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43208

Third Party Advisory x_refsource_misc

http://zerodayinitiative.com/advisories/ZDI-11-053/

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21461514

Scores

EPSS 0.0466

EPSS Percentile 90.7%

Details

CWE

CWE-119

Status published

Products (50)

ibm/lotus_domino 4.6.1

ibm/lotus_domino 4.6.3

ibm/lotus_domino 4.6.4

ibm/lotus_domino 5.0

ibm/lotus_domino 5.0.1

ibm/lotus_domino 5.0.2

ibm/lotus_domino 5.0.3

ibm/lotus_domino 5.0.4

ibm/lotus_domino 5.0.4a

ibm/lotus_domino 5.0.5

... and 40 more

Published Feb 08, 2011

Tracked Since Feb 18, 2026