IBM Lotus Domino long formula buffer overflow
| lotus-long-formula-bo (24206) |  Low Risk |
Description:
IBM Lotus Domino is vulnerable to a denial of service, caused by a stack-based buffer overflow in the Contains() functions. An attacker could exploit this vulnerability by supplying a formula that returns a large list of members to cause the server to crash.
Consequences:
Denial of Service
Remedy:
Upgrade to the latest version of Lotus Notes or Lotus Domino (6.5.5 or later), refer to IBM Technote (FAQ) - Domino Server crashes when calculating a large list in an agent or view selection formula for more information. See References.
References:
- IBM Notes/Domino Fix List: SPR # JMAL5WGQZ7 fixed in 6.5.5 release.
- IBM Support and Downloads: Fix List for Lotus Notes and Lotus Domino Release 6.5.5 Maintenance Release (MR).
- IBM Technote (FAQ): Domino Server crashes when calculating a large list in an agent or view selection formula.
- BID-16158: IBM Lotus Domino and Notes Multiple Unspecified Vulnerabilities
- CVE-2006-0118: Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas.
- SA18328: IBM Lotus Domino/Notes Multiple Vulnerabilities
- VUPEN/ADV-2006-0081: IBM Lotus Domino Remote Denial of Service and Unspecified Issues
Platforms Affected:
- IBM Lotus Domino 6.5.0
- IBM Lotus Domino 6.5.1
- IBM Lotus Domino 6.5.2
- IBM Lotus Domino 6.5.3
- IBM Lotus Domino 6.5.4
- IBM Lotus Domino 6.5.4.1
- IBM Lotus Domino 6.5.4.2
- IBM Lotus Domino Enterprise Server 6.5.2
- IBM Lotus Domino Enterprise Server 6.5.4
- IBM Lotus Notes 6.5
- IBM Lotus Notes 6.5.1
- IBM Lotus Notes 6.5.2
- IBM Lotus Notes 6.5.3
- IBM Lotus Notes 6.5.4
Reported:
Jan 03, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net