IBM Lotus Domino IMAP Server Remote Denial of Service Vulnerability

Bugtraq ID:	34441
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 08 2009 12:00AM
Updated:	Apr 09 2009 06:16PM
Credit:	The vendor disclosed this issue.
Vulnerable:	IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2.1
Not Vulnerable:

IBM Lotus Domino IMAP Server Remote Denial of Service Vulnerability

IBM Lotus Domino IMAP server is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain email attachments.

Successfully exploiting this issue allows remote attackers to crash the affected server, denying further service to legitimate users.

IBM Lotus Domino 8.5 and 8.0.2.1 are vulnerable; other versions may be affected as well.

IBM Lotus Domino IMAP Server Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Lotus Domino IMAP Server Remote Denial of Service Vulnerability

Solution:
The vendor has released interim fixes to address this issue. Please see the references for more information.

IBM Lotus Domino IMAP Server Remote Denial of Service Vulnerability

References:

• Lotus Domino Product Homepage (IBM)
  
• swg21379894 Lotus Domino 8.0.2FP1 Interim Fix 1 (802FP1IF1) (IBM)
  
• swg21381562 Readme for IBM Lotus Domino server release 8.5 Interim Fix 3 (85IF3) (IBM)