IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	43219
Class:	Input Validation Error
CVE:	CVE-2010-3407
Remote:	Yes
Local:	No
Published:	Sep 14 2010 12:00AM
Updated:	Apr 06 2011 06:25AM
Credit:	A. Plaskett of MWR InfoSecurity
Vulnerable:	IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 7.0.4 IBM Lotus Domino 7.0.3 Fix Pack 1 (FP1) IBM Lotus Domino 7.0.3 IBM Lotus Domino 7.0.2 FP3 IBM Lotus Domino 7.0.2 FP2 IBM Lotus Domino 7.0.2 FP1 IBM Lotus Domino 7.0.2 IBM Lotus Domino 7.0.1 IBM Lotus Domino 7.0 IBM Lotus Domino 6.5.6 IBM Lotus Domino 6.5.5 FP3 IBM Lotus Domino 6.5.5 FP2 IBM Lotus Domino 6.5.5 FP1 IBM Lotus Domino 6.5.5 IBM Lotus Domino 6.5.4 FP 2 IBM Lotus Domino 6.5.4 FP 1 IBM Lotus Domino 6.5.4 IBM Lotus Domino 6.5.3 IBM Lotus Domino 6.5.2 IBM Lotus Domino 6.5.1 IBM Lotus Domino 6.5 .0 IBM Lotus Domino 6.0.5 IBM Lotus Domino 6.0.4 IBM Lotus Domino 6.0.3 IBM Lotus Domino 6.0.2 CF2 IBM Lotus Domino 6.0.2 IBM Lotus Domino 6.0.1 IBM Lotus Domino 6.0 IBM Lotus Domino 5.0.13 IBM Lotus Domino 8.5 FP1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0
Not Vulnerable:	IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.0.2 Fix Pack 5

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the 'nrouter.exe' Lotus Domino server process. Failed attacks will cause denial-of-service conditions.

Versions prior to IBM Lotus Domino 8.0.2 Fix Pack 5, 8.5.1 Fix Pack 2, and 8.5.2 are vulnerable.

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/43219.rb

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

References:

• Lotus Notes/Domino 8.0.2 Fix Pack 5 Release Notice (IBM)
  
• Lotus Notes/Domino 8.5.2 Maintenance Release (IBM)
  
• IBM Lotus Domino Homepage (IBM)
  
• Lotus Notes/Domino 8.5.1 Fix Pack 2 Release Notice (IBM)
  
• Stack buffer overflow vulnerability in Lotus Domino iCalendar functionality (IBM)
  
• IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability (MWR InfoSecurity)