Lotus Domino Notes_ExecDirectory Buffer Overflow Vulnerability

Bugtraq ID:	4317
Class:	Boundary Condition Error
CVE:	CVE-2002-0086
Remote:	No
Local:	Yes
Published:	Oct 15 2001 12:00AM
Updated:	Jul 11 2009 11:56AM
Credit:	Discovery credited to Kevin Kotas of the eSecurityOnline Research and Development Team.
Vulnerable:	Lotus Domino 5.0.9 Lotus Domino 5.0.8 Lotus Domino 5.0.7 a Lotus Domino 5.0.7 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.6 a Lotus Domino 5.0.6 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.5 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.4 a Lotus Domino 5.0.4 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc
Not Vulnerable:	Lotus Domino 5.0.9 a

Lotus Domino Notes_ExecDirectory Buffer Overflow Vulnerability

Solution:
This vulnerability is not present in version 5.0.9a. Administrators are advised to upgrade as soon as possible.


Lotus Domino 5.0.4 a

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.4

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.5

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.6

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.6 a

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.7

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.7 a

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.8

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino 5.0.9

• Lotus Domino 5.0.9a
  http://notes.net/qmrdown.nsf

Lotus Domino Notes_ExecDirectory Buffer Overflow Vulnerability

References:

• eSO Security Advisory: 4126 (eSecurityOnline)
  
• Lotus Domino Notes_ExecDirectory Buffer Overflow Vulnerability (IBM)
  
• Lotus Domino Product Homepage (IBM)