Vulnerability in IBM Lotus Domino Web Server
CVE-2003-0178
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.149 (96.6th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.149 · newest: 0.149 · change: 0.000
Affected products
- IBM Lotus Domino Web Server — versions 6.0
References
- marc.info/ (mailing-list)
- www.kb.cert.org/vuls/id/772817 (US Government Resource, Patch, Third Party Advisory, third-party-advisory)
- marc.info/ (mailing-list)
- archives.neohapsis.com/archives/vulnwatch/2003-q1/0080.html (mailing-list)
- marc.info/ (mailing-list)
- www.kb.cert.org/vuls/id/542873 (US Government Resource, third-party-advisory)
- archives.neohapsis.com/archives/vulnwatch/2003-q1/0081.html (mailing-list)
- www.cert.org/advisories/CA-2003-11.html (US Government Resource, third-party-advisory)
- marc.info/ (mailing-list)
- marc.info/ (mailing-list)