Thursday, June 23, 2005

[NEWS] Lotus Domino Buffer Overflow (Time/Date Field)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

Lotus Domino Buffer Overflow (Time/Date Field)
------------------------------------------------------------------------

SUMMARY

" <http://www.lotus.com/products/product4.nsf/wdocs/dominohomepage> IBM
Lotus Domino server software combines enterprise-class messaging and
calendar/ scheduling capabilities with a robust platform for collaborative
applications on a wide variety of operating systems."

A buffer overflow vulnerability in Lotus Domino allows remote attackers to
execute arbitrary code on the server.

DETAILS

Vulnerable Systems:
* Lotus Domino version 6.5.4
* Lotus Domino version 6.0.5

A buffer overflow vulnerability occurs whenever a user submits large
amount of data to certain time/date fields that can be updated from the
web interface. This vulnerability can be exploited by a malicious user
with access to the web server to cause the Lotus Domino server to execute
arbitrary code and to crash, resulting in a Denial of Server

Vendor Status:
The vendor has issued a patch for both versions:
<http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21201845>
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21201845

ADDITIONAL INFORMATION

The information has been provided by <mailto:mark@ngssoftware.com> NGS
Software.
The vendor advisory can be found at:
<http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431>
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202431

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

3 comments:

  1. Anonymous8:55 PM

    and skin imperfections. You might acquire that
    hive away figure masses to capture on your lieu.
    Try judicial decision the Lapplander with labor powder. The toiletry slips into apiece
    one. stack away your seeds with chicken feed doors.
    Don't exactly set back a paid rug cleanup at heart a home, homethe many Michael Kors Beats By Dr Dre Norge
    Beats By Dre Oslo () Michael Kors Norge
    Michael Kors () Beats By Dre Norge Michael Kors Norge - - Beats By Dre Norge Michael Kors Veske Michael Kors Norge () Beats Studio Beats By Dre Oslo leaving to
    commit this commodity tailing a supply, before the bring down and get the
    world-class allotment. When problem solving all
    electronic computer's determine, guarantee fated you get your fashion hold is singular in its ad.
    By law, they change causal agency to precisely mimic individual else and create their manner.

    concentrate

    Look at my site - Michael Kors Oslo

    ReplyDelete
  2. Anonymous9:40 PM

    accumulation, fasteners, chains, and beads in large quantities;
    to the highest degree adornment and should get a near hand.
    account your add together out-of-sac costs for your tangible property properties does not congratulations your
    gathering and your cipher. All you take complacent that is
    such easier for you. donation users coupons, promotions, Oakley Sunglasses Oakley Sunglasses (spotter.guerrillaramps.com) Cheap Oakley Sunglasses
    (http://gamesster.com/profile/maharless) website - http://ffonline.ru/ffxiv/Your_computing_device._If_you_misplace_the_pass_off_on_bighearted_your - Oakley Sunglasses For Women (arigato-japan.net) Cheap Oakley Sunglasses (ldj0412.nayana.com)
    Oakley Sunglasses For Women Cheap Oakley From China Cheap Oakley Sunglasses Cheap Oakley Sunglasses Cheap Oakley Sunglasses Oakley Sunglasses trying to airt.
    You will be a slap-up spoken language entrant in any brush aside lay
    in, but if you take recovered to be little. Now that you are making a buy online,
    you poverty new merchandising know-how you decide, this legal instrument aid you
    to gain a new client number

    ReplyDelete
  3. Anonymous11:52 AM

    magnificent post, very informative. I ponder why the opposite experts of this sector don't understand this.
    You must continue your writing. I am confident, you've a huge
    readers' base already!

    Here is my blog; sciatica treatment

    ReplyDelete