IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
BID:97910
Info
IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 97910 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-1274 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2017 12:00AM |
| Updated: | May 31 2017 04:46PM |
| Credit: | misterch0c |
| Vulnerable: |
IBM Domino 9.0.1 FP6 IBM Domino 9.0.1 FP 6 IBM Domino 9.0.1 FP 5 IBM Domino 9.0.1 FP 4 IF 3 IBM Domino 9.0.1 FP 4 IF 2 IBM Domino 9.0.1 FP 4 IBM Domino 9.0.1 FP 3 IF 2 IBM Domino 9.0.1 FP 3 IBM Domino 9.0.1 FP 2 IF 3 IBM Domino 9.0.1 FP 2 IF 2 IBM Domino 9.0.1 FP 2 IF 1 IBM Domino 9.0.1 Fix Pack 3 IF 3 IBM Domino 9.0.1 Fix Pack 3 IBM Domino 9.0.1 Feature Pack 8 IF 1 IBM Domino 8.5.3 IF 6 IF 9 IBM Domino 8.5.3 IF 6 IF 10 IBM Domino 8.5.3 FP6 IF14 IBM Domino 8.5.3 FP6 IF13 IBM Domino 8.5.3 FP 6 IF4 IBM Domino 8.5.3 FP 6 IF 9 IBM Domino 8.5.3 FP 6 IF 6 IBM Domino 8.5.3 FP 6 IF 5 IBM Domino 8.5.3 FP 6 IF 16 IBM Domino 8.5.3 FP 6 IF 13 IBM Domino 8.5.3 FP 6 IF 12 IBM Domino 8.5.3 FP 6 IF 11 IBM Domino 8.5.3 FP 6 IF 10 IBM Domino 8.5.3 FP 6 IBM Domino 8.5.3 Fix Pack 6 IF 7 IBM Domino 8.5.3 Fix Pack 6 IBM Domino 8.5.3 Fix Pack 5 IBM Domino 8.5.3 IBM Domino 8.5.2 FP 4 IBM Domino 8.5.2 IBM Domino 8.5.1 FP 5 IBM Domino 8.5.1 IBM Domino 9.0.1 FP 7 IBM Domino 9.0.1 FP 6 IF 3 IBM Domino 9.0.1 FP 6 IF 1 IBM Domino 9.0.1 IBM Domino 9.0 IF 7 IBM Domino 9.0 IF 6 IBM Domino 9.0 IF 4 |
| Not Vulnerable: |
IBM Domino 9.0.1 FP8 IF2 IBM Domino 8.5.3 FP6 IF17 |
Discussion
IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
IBM Domino Server is prone to a stack-based buffer overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.
Note: This issue was previously titled 'IBM Lotus Domino Server Stack Buffer Overflow Vulnerability'. The title have been changed to better reflect the vulnerability information.
IBM Domino Server is prone to a stack-based buffer overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.
Note: This issue was previously titled 'IBM Lotus Domino Server Stack Buffer Overflow Vulnerability'. The title have been changed to better reflect the vulnerability information.
Exploit / POC
IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
Reports indicate that exploit is publicly available. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Reports indicate that exploit is publicly available. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Domino CVE-2017-1274 Stack Buffer Overflow Vulnerability
References:
References:
- Emphasismine-3.4.0.0.xml (Misterch0c)
- IBM Domino Home Page (IBM)
- IBM Security Bulletin: IBIBM Security Bulletin: IBM Domino server IMAP EXAMINE c (IBM)
- swg22002280: IBM Domino server IMAP EXAMINE command stack buffer overflow (CVE-2 (IBM)
- Vulnerability Note VU#676632 IBM Lotus Domino server mailbox name stack buffer o (CERT)