IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
BID:46244
Info
IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 46244 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0918 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2011 12:00AM |
| Updated: | Jun 10 2011 05:30PM |
| Credit: | Anonymous |
| Vulnerable: |
IBM Lotus Domino 0 |
| Not Vulnerable: | |
Discussion
IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition.
IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The vendor has been unable to confirm the existence of this issue. This BID will be updated as more information emerges.
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The vendor has been unable to confirm the existence of this issue. This BID will be updated as more information emerges.
References
IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Stack Buffer Overflow Vulnerability
References:
References: