CVE-2002-1624

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.

Ссылки

http://securitytracker.com/id?1004052
http://www.kb.cert.org/vuls/id/772563
US Government Resource
http://www.securityfocus.com/bid/6646
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11058
http://securitytracker.com/id?1004052
http://www.kb.cert.org/vuls/id/772563
US Government Resource
http://www.securityfocus.com/bid/6646
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11058

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.4:*:solaris:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.4a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.6a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.7:*:solaris:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.7a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_domino:5.0.9a:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05326

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-pq7v-p84f-g866

github

почти 4 года назад