BID:2571

Lotus Domino R5 Server GET Request DoS Vulnerability

Info

Lotus Domino R5 Server GET Request DoS Vulnerability

Bugtraq ID:	2571
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2001 12:00AM
Updated:	Apr 11 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by Peter Gründl <[email protected]> on April 11, 2001.
Vulnerable:	Lotus Domino 5.0.6 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.5 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.4 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.3 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.2 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.1 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc

Not Vulnerable:	Lotus Domino 5.0.7 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc

Discussion

Lotus Domino R5 Server GET Request DoS Vulnerability

Lotus Domino R5 prior to version 5.0.7 are subject to a DoS. A remotely submitted GET request composed of an arbitrary string of unicode characters, will cause the server to stop responding and possibly other applications depending on it. Rebooting the server is required in order to gain normal functionality.

Exploit / POC

Lotus Domino R5 Server GET Request DoS Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Lotus Domino R5 Server GET Request DoS Vulnerability

Solution:
Lotus has addressed this issue in version 5.0.7:

http://www.notes.net/qmrdown.nsf/QMRWelcome

References

Lotus Domino R5 Server GET Request DoS Vulnerability

References:

Lotus Domino Product Homepage (IBM)