BID:3041

Lotus Domino R5 LDAP Service Buffer Overflow Vulnerabilities

Info

Lotus Domino R5 LDAP Service Buffer Overflow Vulnerabilities

Bugtraq ID:	3041
Class:	Boundary Condition Error
CVE:	CVE-2001-1311
Remote:	Yes
Local:	No
Published:	Jul 16 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	The vulnerabilities were discovered using the PROTOS project's LDAPv3 test suite. Test results were published in a CERT Security Advisory on July 16, 2001.
Vulnerable:	Lotus Domino 5.0.7 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.6 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.5 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.4 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.3 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.2 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.1 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc

Not Vulnerable:	Lotus Domino 5.0.7 a

Exploit / POC

Lotus Domino R5 LDAP Service Buffer Overflow Vulnerabilities

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

References

Lotus Domino R5 LDAP Service Buffer Overflow Vulnerabilities

References:

Lotus Domino Product Homepage (IBM)
PROTOS Test-Suite: c06-ldapv3 (PROTOS Project)