| Vulnerability Name: | CVE-2011-0916 (CCN-65199) | ||||||||
| Assigned: | 2011-02-07 | ||||||||
| Published: | 2011-02-07 | ||||||||
| Updated: | 2011-02-23 | ||||||||
| Summary: | Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message, aka SPR KLYH889M8H. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2011-0916 Source: CCN Type: SA43247 IBM Lotus Domino SMTP Service Filename Buffer Overflow Source: SECUNIA Type: UNKNOWN 43247 Source: CCN Type: IBM Support and Downloads Potential security vulnerabilities in Lotus Notes & Domino Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21461514 Source: CCN Type: IBM Lotus Domino Web site IBM Software - IBM Lotus Domino - Product Overview Source: CCN Type: OSVDB ID: 70851 IBM Lotus Domino SMTP Service Filename Parameter Unspecified Overflow Source: CCN Type: BID-46245 IBM Lotus Domino SMTP Multiple Filename Arguments Remote Buffer Overflow Vulnerability Source: MISC Type: UNKNOWN http://zerodayinitiative.com/advisories/ZDI-11-049/ Source: XF Type: UNKNOWN ibm-lotus-domino-smtp-bo(65199) Source: CCN Type: ZDI-11-049 (0day) IBM Lotus Domino SMTP Multiple Filename Arguments Remote Code Execution Vulnerability | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||