Detections
Analytics
IBM Lotus Domino 8.5.x < 8.5.3 Multiple Vulnerabilities
critical Nessus Plugin ID 66239
Language:
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
According to its banner, the version of Lotus Domino on the remote host is 8.5.x prior to 8.5.3, and is, therefore, affected by the following vulnerabilities :- A heap-based buffer overflow error exists in the file ndiiop.exe related to the DIIOP implementation and GIOP request handling. (CVE-2011-0914)
- A stack-based buffer overflow error exists in the file nrouter.exe related to the 'name' parameter in a 'Content-Type' header and malformed Notes calendar meeting requests. (CVE-2011-0915)
- A stack-based buffer overflow error exists related to the 'filename' parameter, MIME email messages and the SMTP service. (CVE-2011-0916)
- A buffer overflow error exists in the file nLDAP.exe related to handling long strings in LDAP Bind operations. (CVE-2011-0917)
- An authentication bypass error exists related to the 'Remote Console' and 'UNC share pathnames'.
(CVE-2011-0920)
- A stack-based buffer overflow error exists in the function 'NSFComputeEvaluateExt' function in the file 'Nnotes.dll' related to the 'tHPRAgentName' parameter in an 'fmHttpPostRequest' OpenForm action.
(CVE-2011-3575)
Note that exploitation of several of these vulnerabilities could result in execution of arbitrary code.
Solution
Upgrade to Lotus Domino 8.5.3 or later.See Also
https://www.zerodayinitiative.com/advisories/ZDI-11-047/
https://www.zerodayinitiative.com/advisories/ZDI-11-048/
https://www.zerodayinitiative.com/advisories/ZDI-11-049/
https://www.zerodayinitiative.com/advisories/ZDI-11-052/
https://www.zerodayinitiative.com/advisories/ZDI-11-110/
http://www.nessus.org/u?8cb395e8
Plugin Details
Severity: Critical
ID: 66239
File Name: domino_8_5_3.nasl
Version: 1.6
Type: remote
Family: Web Servers
Published: 4/26/2013
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:ibm:lotus_domino
Required KB Items: Domino/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/17/2011
Vulnerability Publication Date: 2/7/2011
Exploitable With
CANVAS (D2ExploitPack)
Core Impact
Reference Information
CVE: CVE-2011-0914, CVE-2011-0915, CVE-2011-0916, CVE-2011-0917, CVE-2011-0920, CVE-2011-3575