CVE-2003-0122

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2003-0122
Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html Third Party Advisory
http://marc.info/?l=bugtraq&m=104757319829443&w=2 Mailing List Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105101 Broken Link
http://www.cert.org/advisories/CA-2003-11.html Third Party Advisory US Government Resource
http://www.ciac.org/ciac/bulletins/n-065.shtml Broken Link
http://www.kb.cert.org/vuls/id/433489 Third Party Advisory US Government Resource
http://www.rapid7.com/advisories/R7-0010.html Not Applicable
http://www.securityfocus.com/bid/7037 Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11526 Third Party Advisory VDB Entry
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html Third Party Advisory
http://marc.info/?l=bugtraq&m=104757319829443&w=2 Mailing List Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105101 Broken Link
http://www.cert.org/advisories/CA-2003-11.html Third Party Advisory US Government Resource
http://www.ciac.org/ciac/bulletins/n-065.shtml Broken Link
http://www.kb.cert.org/vuls/id/433489 Third Party Advisory US Government Resource
http://www.rapid7.com/advisories/R7-0010.html Not Applicable
http://www.securityfocus.com/bid/7037 Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11526 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:lotus_domino:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:4.6.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:4.6.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.4a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.6a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.7a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.8a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.9a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.9a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_notes_client:r5:*:*:*:*:*:*:*
History

No history.

Information

Published : 2003-03-18 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2003-0122

Mitre link : CVE-2003-0122

CVE.ORG link : CVE-2003-0122

JSON object : View

Products Affected

ibm

  • lotus_domino
  • lotus_notes_client
CWE
NVD-CWE-Other