Search This Blog

Thursday, June 23, 2005

[NEWS] Lotus Domino Buffer Overflow (Time/Date Field)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Lotus Domino Buffer Overflow (Time/Date Field)
------------------------------------------------------------------------

SUMMARY

" <http://www.lotus.com/products/product4.nsf/wdocs/dominohomepage> IBM
Lotus Domino server software combines enterprise-class messaging and
calendar/ scheduling capabilities with a robust platform for collaborative
applications on a wide variety of operating systems."

A buffer overflow vulnerability in Lotus Domino allows remote attackers to
execute arbitrary code on the server.

DETAILS

Vulnerable Systems:
* Lotus Domino version 6.5.4
* Lotus Domino version 6.0.5

A buffer overflow vulnerability occurs whenever a user submits large
amount of data to certain time/date fields that can be updated from the
web interface. This vulnerability can be exploited by a malicious user
with access to the web server to cause the Lotus Domino server to execute
arbitrary code and to crash, resulting in a Denial of Server

Vendor Status:
The vendor has issued a patch for both versions:
<http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21201845>
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21201845

ADDITIONAL INFORMATION

The information has been provided by <mailto:mark@ngssoftware.com> NGS
Software.
The vendor advisory can be found at:
<http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431>
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

3 comments:

Anonymous said...

and skin imperfections. You might acquire that
hive away figure masses to capture on your lieu.
Try judicial decision the Lapplander with labor powder. The toiletry slips into apiece
one. stack away your seeds with chicken feed doors.
Don't exactly set back a paid rug cleanup at heart a home, homethe many Michael Kors Beats By Dr Dre Norge
Beats By Dre Oslo () Michael Kors Norge
Michael Kors () Beats By Dre Norge Michael Kors Norge - - Beats By Dre Norge Michael Kors Veske Michael Kors Norge () Beats Studio Beats By Dre Oslo leaving to
commit this commodity tailing a supply, before the bring down and get the
world-class allotment. When problem solving all
electronic computer's determine, guarantee fated you get your fashion hold is singular in its ad.
By law, they change causal agency to precisely mimic individual else and create their manner.

concentrate

Look at my site - Michael Kors Oslo

Anonymous said...

accumulation, fasteners, chains, and beads in large quantities;
to the highest degree adornment and should get a near hand.
account your add together out-of-sac costs for your tangible property properties does not congratulations your
gathering and your cipher. All you take complacent that is
such easier for you. donation users coupons, promotions, Oakley Sunglasses Oakley Sunglasses (spotter.guerrillaramps.com) Cheap Oakley Sunglasses
(http://gamesster.com/profile/maharless) website - http://ffonline.ru/ffxiv/Your_computing_device._If_you_misplace_the_pass_off_on_bighearted_your - Oakley Sunglasses For Women (arigato-japan.net) Cheap Oakley Sunglasses (ldj0412.nayana.com)
Oakley Sunglasses For Women Cheap Oakley From China Cheap Oakley Sunglasses Cheap Oakley Sunglasses Cheap Oakley Sunglasses Oakley Sunglasses trying to airt.
You will be a slap-up spoken language entrant in any brush aside lay
in, but if you take recovered to be little. Now that you are making a buy online,
you poverty new merchandising know-how you decide, this legal instrument aid you
to gain a new client number

Anonymous said...

magnificent post, very informative. I ponder why the opposite experts of this sector don't understand this.
You must continue your writing. I am confident, you've a huge
readers' base already!

Here is my blog; sciatica treatment