critical9.0Public exploit code
CVE-2011-3575
Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Lotus Domino 8.5.2 - 'NSFComputeEvaluateExt()' Remote Stack Buffer Overflow2011-09-20 · remote · windows · Verified
Impact
Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Lotus Domino | Version 8.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.research.reversingcode.com/exploits/IBMLotusDomino_StackOverflowPoC
- http://www.research.reversingcode.com/index.php/advisories/73-ibm-ssd-1012211
- http://www.securityfocus.com/bid/49705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69802
- http://www.research.reversingcode.com/exploits/IBMLotusDomino_StackOverflowPoC
- http://www.research.reversingcode.com/index.php/advisories/73-ibm-ssd-1012211
- http://www.securityfocus.com/bid/49705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69802