Login Request a demo
Unscored severity · published May 2, 2005
CVE-2005-1101
Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via large amounts of data in certain (1) time or (2) date fields.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Lotus Domino Server · Ibm
6.0.5; 6.5.4 · source: NVD
Affected product
LD
Lotus Domino Server
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1101
marc.info
http://marc.info/?l=bugtraq&m=111335285121320&w=2
Vendor Advisory
http://secunia.com/advisories/14879/
Patch
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431
Patch
http://www.ngssoftware.com/advisories/lotus-01.txt
www.osvdb.org
http://www.osvdb.org/15364
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20042
More from Lotus Domino Server
–
CVE-2008-7253
The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to…
–
CVE-2006-0580
IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP)
–
CVE-2005-0986
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and…
–
CVE-2002-2025
Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1)…
–
CVE-2002-0037
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that…