Vulnerability CVE-2006-0117 - CERT Civis.Net

Vulnerability Name:

CVE-2006-0117 (CCN-24205)

Assigned:

2006-01-03

Published:

2006-01-03

Updated:

2017-07-20

Summary:

Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to MIME Conversion".

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2006-0117

Source: CCN
Type: SA18328
IBM Lotus Domino/Notes Multiple Vulnerabilities

Source: SECUNIA
Type: Patch, Vendor Advisory
18328

Source: CCN
Type: IBM Support and Downloads
Fix List for Lotus Notes and Lotus Domino Release 6.5.5 Maintenance Release (MR)

Source: CONFIRM
Type: UNKNOWN
http://www-1.ibm.com/support/docview.wss?uid=swg27007054

Source: CONFIRM
Type: UNKNOWN
http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument

Source: CCN
Type: IBM Notes/Domino Fix List
SPR # OABA6AYD3L fixed in 6.5.5 release

Source: CONFIRM
Type: UNKNOWN
http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument

Source: CCN
Type: OSVDB ID: 22437
IBM Lotus Domino CD to MIME Conversion Unspecified Overflow

Source: BID
Type: Patch
16158

Source: CCN
Type: BID-16158
IBM Lotus Domino and Notes Multiple Unspecified Vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2006-0081

Source: XF
Type: UNKNOWN
lotus-cdtomime-dos(24205)

Source: XF
Type: UNKNOWN
lotus-cdtomime-dos(24205)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino:6.5.4.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*

Denotes that component is vulnerable