Detections
Analytics

Lotus Domino < 6.0.1 Multiple Overflows

high Nessus Network Monitor Plugin ID 1587

Synopsis

The remote host is running a vulnerable version of Lotus Domino server.

Description

The remote Lotus Domino server, according to its version number, is vulnerable to various buffer overflows and denial of service attack. An attacker may use these to disable this server or execute arbitrary commands on the remote host.

Solution

Upgrade to Domino 6.0.1 or higher.

See Also

http://www.nextgenss.com/advisories/lotus-hostlocbo.txt

Plugin Details

Severity: High

ID: 1587

Family: Web Servers

Published: 8/20/2004

Updated: 3/6/2019

Nessus ID: 11386

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:lotus_domino_web_server

Reference Information

CVE: CVE-2003-0178

BID: 6870, 6871