IBM Lotus Notes/Domino CD to MIME conversion denial of service
| lotus-cdtomime-dos (24205) |  Medium Risk |
Description:
IBM Lotus Notes and Lotus Domino versions is vulnerable to a denial of service, caused by a buffer overflow that can occur during CD to MIME conversion. An attacker could exploit this vulnerability to cause the router service to crash or stop responding.
Consequences:
Denial of Service
Remedy:
Upgrade to the latest version of Lotus Notes or Lotus Domino (6.5.5 or later), refer to IBM Support and Downloads - Fix List for Lotus Notes and Lotus Domino Release 6.5.5 Maintenance Release (MR) for more information. See References.
References:
- IBM Notes/Domino Fix List: SPR # OABA6AYD3L fixed in 6.5.5 release.
- IBM Support and Downloads: Fix List for Lotus Notes and Lotus Domino Release 6.5.5 Maintenance Release (MR).
- BID-16158: IBM Lotus Domino and Notes Multiple Unspecified Vulnerabilities
- CVE-2006-0117: Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving CD to MIME Conversion.
- SA18328: IBM Lotus Domino/Notes Multiple Vulnerabilities
- VUPEN/ADV-2006-0081: IBM Lotus Domino Remote Denial of Service and Unspecified Issues
Platforms Affected:
- IBM Lotus Domino 6.5.0
- IBM Lotus Domino 6.5.1
- IBM Lotus Domino 6.5.2
- IBM Lotus Domino 6.5.3
- IBM Lotus Domino 6.5.4
- IBM Lotus Domino 6.5.4.1
- IBM Lotus Domino 6.5.4.2
- IBM Lotus Domino Enterprise Server 6.5.2
- IBM Lotus Domino Enterprise Server 6.5.4
- IBM Lotus Notes 6.5
- IBM Lotus Notes 6.5.1
- IBM Lotus Notes 6.5.2
- IBM Lotus Notes 6.5.3
- IBM Lotus Notes 6.5.4
Reported:
Jan 03, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net