Test Kennung:	1.3.6.1.4.1.25623.1.0.902419
Kategorie:	Buffer overflow
Titel:	IBM Lotus Domino Multiple Remote Buffer Overflow Vulnerabilities
Zusammenfassung:	IBM Lotus Domino Server is prone to multiple vulnerabilities.
Beschreibung:	Summary: IBM Lotus Domino Server is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Stack overflow in the SMTP service, which allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message. - Buffer overflow in nLDAP.exe, which allows remote attackers to execute arbitrary code via an LDAP Bind operation. - Stack overflow in the NRouter service, which allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages. - Multiple stack overflows in the POP3 and IMAP services, which allows remote attackers to execute arbitrary code via non-printable characters in an envelope sender address. - The Remote Console, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. Vulnerability Impact: Successful exploitation may allow remote attackers to execute arbitrary code in the context of the Lotus Domino server process or bypass authentication. Affected Software/OS: IBM Lotus Domino versions 8.5.3 prior Solution: Upgrade to version 8.5.2 FP3 or 8.5.3 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0916 http://zerodayinitiative.com/advisories/ZDI-11-049/ http://secunia.com/advisories/43247 Common Vulnerability Exposure (CVE) ID: CVE-2011-0918 http://www-01.ibm.com/support/docview.wss?uid=swg21461514 http://zerodayinitiative.com/advisories/ZDI-11-046/ http://secunia.com/advisories/43224 Common Vulnerability Exposure (CVE) ID: CVE-2011-0919 Bugtraq: 20110207 ZDI-11-045: IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/516232/100/0/threaded http://zerodayinitiative.com/advisories/ZDI-11-045/ Common Vulnerability Exposure (CVE) ID: CVE-2011-0920
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.