Test ID:	1.3.6.1.4.1.25623.1.0.107155
Category:	Buffer overflow
Title:	IBM Lotus Domino Server Stack Buffer Overflow Vulnerability
Summary:	IBM Lotus Domino Server is prone to a stack-based buffer overflow vulnerability.
Description:	Summary: IBM Lotus Domino Server is prone to a stack-based buffer overflow vulnerability. Vulnerability Insight: IBM Domino is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when parsing BMP images. Vulnerability Impact: Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Affected Software/OS: IBM Domino 9.0.1 Fix Pack 3 (plus Interim Fixes) and earlier. IBM Domino 8.5.3 Fix Pack 6 (plus Interim Fixes) and earlier All 9.0 and 8.5.x releases of IBM Domino prior to those listed above. Solution: Domino 9.0.x users should update to Domino 9.0.1 Fix Pack 3 Interim Fix 3. Domino 8.5.x users should update to Domino 8.5.3 Fix Pack 6 Interim Fix 7. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1274 BugTraq ID: 97910 http://www.securityfocus.com/bid/97910 BugTraq ID: 98019 http://www.securityfocus.com/bid/98019 CERT/CC vulnerability note: VU#676632 https://www.kb.cert.org/vuls/id/676632 http://packetstormsecurity.com/files/152786/Lotus-Domino-8.5.3-EXAMINE-Stack-Buffer-Overflow.html http://www.securitytracker.com/id/1038358
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.