IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	49705
Class:	Input Validation Error
CVE:	CVE-2011-3575
Remote:	Yes
Local:	No
Published:	Sep 20 2011 12:00AM
Updated:	Nov 02 2011 05:23PM
Credit:	rmallof
Vulnerable:	IBM Lotus Domino 8.5.2
Not Vulnerable:	IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 FP2

IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability

IBM Lotus Domino is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue will allow remote attackers to execute arbitrary code with system-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition.

Lotus Domino 8.5.2 is vulnerable; other versions may also be affected.

IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/49705.py

IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more details.

IBM Lotus Domino 'NSFComputeEvaluateExt()' Function Remote Stack Buffer Overflow Vulnerability

References:

• IBM Lotus Domino Homepage (IBM)
  
• IBM Lotus Domino HPRAgentName buffer overflow (IBM)
  
• SSD-1012211 - IBM Lotus Domino 8.5.2 Nnotes.dll!NSFComputeEvaluateExt Stack-Base (rmallof)