IBM Lotus Domino SMTP remote buffer overflow vulnerability with multiple file name Parameters

Release date:
Updated on:

Affected Systems:
IBM Lotus Domino
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46245

Lotus Domino is an email and cluster platform that integrates email, document database, Rapid Application Development Technology, and Web technology.

The remote buffer overflow vulnerability exists in the implementation of IBM Lotus Domino with multiple file name parameters. Because the interface does not perform sufficient boundary checks on user input, remote attackers can exploit this vulnerability to execute arbitrary code with system-level permissions to completely control affected computers or cause DoS attacks.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.ers.ibm.com/