Detections
Analytics

Lotus Domino LDAP Server Crafted Packet Remote DoS

medium Nessus Plugin ID 20890

Language:

Synopsis

The remote LDAP server is affected by a denial of service vulnerability.

Description

The LDAP server on the remote host appears to have crashed after being sent a malformed request. The specific request used is known to crash the LDAP server in Lotus Domino 7.0. By leveraging this flaw, an attacker may be able to deny service to legitimate users.

Solution

Unknown at this time.

See Also

https://seclists.org/dailydave/2006/q1/110

Plugin Details

Severity: Medium

ID: 20890

File Name: lotus_domino_ldap_dos.nasl

Version: 1.18

Type: remote

Published: 2/13/2006

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:ibm:lotus_domino

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2006-0580

BID: 16523