Description
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
References
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- VU#772817 third-party-advisory
- 20030217 Domino Advisories UPDATE mailing-list
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- VU#542873 third-party-advisory
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- CA-2003-11 third-party-advisory
- 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b) mailing-list
- 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a) mailing-list
- lotus-domino-hostname-bo(11337) vdb-entry
- VU#206361 third-party-advisory
- lotus-domino-inotes-bo(11336) vdb-entry
- 20030217 Domino Advisories UPDATE mailing-list
- 6870 vdb-entry
- N-065 third-party-advisory government-resource
- 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c) mailing-list
- http://www.nextgenss.com/advisories/lotus-hostlocbo.txt
- http://www.nextgenss.com/advisories/lotus-inotesoflow.txt
- 6871 vdb-entry