IBM Lotus Notes Traveler Prior to 8.5.1.1 Multiple Denial of Service Vulnerabilities

Bugtraq ID:	45592
Class:	Input Validation Error
CVE:	CVE-2010-4552 CVE-2010-4553
Remote:	Yes
Local:	No
Published:	Nov 30 2009 12:00AM
Updated:	Nov 30 2009 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	IBM Lotus Notes Traveler 8.5.1.0
Not Vulnerable:	IBM Lotus Notes Traveler 8.5.1.1

IBM Lotus Notes Traveler Prior to 8.5.1.1 Multiple Denial of Service Vulnerabilities

IBM Lotus Notes Traveler is prone to multiple denial-of-service vulnerabilities because it fails to properly handle user-supplied input.

Successful exploiting these issues can crash the server, denying service to legitimate users.

Versions prior to IBM Lotus Notes Traveler 8.5.1.1 are vulnerable.

IBM Lotus Notes Traveler Prior to 8.5.1.1 Multiple Denial of Service Vulnerabilities

An attacker can exploit theses issues using readily available tools.

IBM Lotus Notes Traveler Prior to 8.5.1.1 Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the reference for more details.

IBM Lotus Notes Traveler Prior to 8.5.1.1 Multiple Denial of Service Vulnerabilities

References:

• Lotus Notes Traveler 851 FP3 Release Notes (IBM)
  
• Lotus Notes Traveler Homepage (IBM)
  
• LO45478: PANIC: LOOKUPHANDLE: HANDLE OUT OF RANGE (IBM)
  
• LO46561: MAXIMUM NUMBER OF MEMORY SEGMENTS USED BY TRAVELER (IBM)