critical10.0Public exploit code
CVE-2007-1675
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow2007-07-20 · remote · windows · Verified
- IBM Lotus Domino Server 6.5 - Remote Overflow2007-03-31 · remote · windows · Verified
- IBM Lotus Domino Server 6.5 - 'Username' Remote Denial of Service2007-03-29 · dos · windows · Verified
Impact
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Domino | Versions 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24633
- http://www-1.ibm.com/support/docview.wss?uid=swg21257028
- http://www.securityfocus.com/bid/23172
- http://www.securityfocus.com/bid/23173
- http://www.securitytracker.com/id?1017823
- http://www.vupen.com/english/advisories/2007/1133
- http://www.zerodayinitiative.com/advisories/ZDI-07-011.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33276
- http://secunia.com/advisories/24633
- http://www-1.ibm.com/support/docview.wss?uid=swg21257028
- http://www.securityfocus.com/bid/23172
- http://www.securityfocus.com/bid/23173
- http://www.securitytracker.com/id?1017823
- http://www.vupen.com/english/advisories/2007/1133
- http://www.zerodayinitiative.com/advisories/ZDI-07-011.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33276