Description
Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.
References
- domino-ldap-bo(33278) vdb-entry
- 1017825 vdb-entry
- 23173 vdb-entry
- 23174 vdb-entry
- 24633 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21257248
- 20070328 IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability third-party-advisory
- ADV-2007-1133 vdb-entry
- VU#927988 third-party-advisory