{"api_version":"1","generated_at":"2026-07-23T03:25:02+00:00","cve":"CVE-2003-0179","urls":{"html":"https://cve.report/CVE-2003-0179","api":"https://cve.report/api/cve/CVE-2003-0179.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-0179","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-0179"},"summary":{"title":"CVE-2003-0179","description":"Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-04-02 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11339","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11339","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/6872","name":"http://www.securityfocus.com/bid/6872","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"IBM Lotus Notes and Domino COM Object Control Handler Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html","name":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Neohapsis Archives - VulnWatch - [VulnWatch] Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) - From nisr_at_nextgenss.com","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.cert.org/advisories/CA-2003-11.html","name":"http://www.cert.org/advisories/CA-2003-11.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=ntbugtraq&m=104558778331387&w=2","name":"http://marc.info/?l=ntbugtraq&m=104558778331387&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Domino Advisories UPDATE' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=ntbugtraq&m=104558778131373&w=2","name":"http://marc.info/?l=ntbugtraq&m=104558778131373&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ciac.org/ciac/bulletins/n-065.shtml","name":"http://www.ciac.org/ciac/bulletins/n-065.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"N-065: Multiple Vulnerabilities in Lotus Notes and Domino","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=104550335103136&w=2","name":"http://marc.info/?l=bugtraq&m=104550335103136&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Domino Advisories UPDATE' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt","name":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"nextgenss.com -&nbspThis website is for sale! -&nbspnextgenss Resources and Information.","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/571297","name":"http://www.kb.cert.org/vuls/id/571297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"],"title":"CERT/CC Vulnerability Note VU#571297","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543","name":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://marc.info/?l=bugtraq&m=104550124032513&w=2","name":"http://marc.info/?l=bugtraq&m=104550124032513&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0179","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0179","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"179","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_domino_web_server","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"179","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"lotus_notes_client","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:43:36.016Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20030217 Domino Advisories UPDATE","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104550335103136&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543"},{"name":"CA-2003-11","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.cert.org/advisories/CA-2003-11.html"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred"],"url":"http://marc.info/?l=ntbugtraq&m=104558778131373&w=2"},{"name":"6872","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/6872"},{"name":"VU#571297","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/571297"},{"name":"20030217 Domino Advisories UPDATE","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred"],"url":"http://marc.info/?l=ntbugtraq&m=104558778331387&w=2"},{"name":"N-065","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"],"url":"http://www.ciac.org/ciac/bulletins/n-065.shtml"},{"name":"lotus-notes-activex-bo(11339)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11339"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=104550124032513&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-02-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20030217 Domino Advisories UPDATE","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104550335103136&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543"},{"name":"CA-2003-11","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.cert.org/advisories/CA-2003-11.html"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_NTBUGTRAQ"],"url":"http://marc.info/?l=ntbugtraq&m=104558778131373&w=2"},{"name":"6872","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/6872"},{"name":"VU#571297","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/571297"},{"name":"20030217 Domino Advisories UPDATE","tags":["mailing-list","x_refsource_NTBUGTRAQ"],"url":"http://marc.info/?l=ntbugtraq&m=104558778331387&w=2"},{"name":"N-065","tags":["third-party-advisory","government-resource","x_refsource_CIAC"],"url":"http://www.ciac.org/ciac/bulletins/n-065.shtml"},{"name":"lotus-notes-activex-bo(11339)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11339"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_VULNWATCH"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html"},{"tags":["x_refsource_MISC"],"url":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=104550124032513&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-0179","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20030217 Domino Advisories UPDATE","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104550335103136&w=2"},{"name":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543","refsource":"CONFIRM","url":"http://www-1.ibm.com/support/docview.wss?uid=swg21104543"},{"name":"CA-2003-11","refsource":"CERT","url":"http://www.cert.org/advisories/CA-2003-11.html"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","refsource":"NTBUGTRAQ","url":"http://marc.info/?l=ntbugtraq&m=104558778131373&w=2"},{"name":"6872","refsource":"BID","url":"http://www.securityfocus.com/bid/6872"},{"name":"VU#571297","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/571297"},{"name":"20030217 Domino Advisories UPDATE","refsource":"NTBUGTRAQ","url":"http://marc.info/?l=ntbugtraq&m=104558778331387&w=2"},{"name":"N-065","refsource":"CIAC","url":"http://www.ciac.org/ciac/bulletins/n-065.shtml"},{"name":"lotus-notes-activex-bo(11339)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11339"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","refsource":"VULNWATCH","url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html"},{"name":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt","refsource":"MISC","url":"http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt"},{"name":"20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=104550124032513&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-0179","datePublished":"2003-03-29T05:00:00.000Z","dateReserved":"2003-03-28T00:00:00.000Z","dateUpdated":"2024-08-08T01:43:36.016Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-04-02 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_web_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"33C637A6-CD7E-4E88-B994-5A5139EE91C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes_client:6.0:*:*:*:*:*:*:*","matchCriteriaId":"65BA8CED-47B7-4F45-BFCD-0BB7968D3384"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"179","Ordinal":"1","Title":"CVE-2003-0179","CVE":"CVE-2003-0179","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"179","Ordinal":"1","NoteData":"Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.","Type":"Description","Title":"CVE-2003-0179"},{"CveYear":"2003","CveId":"179","Ordinal":"2","NoteData":"2003-03-29","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"179","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}