CVE Details for CVE: CVE-2001-1445
Summary
Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 01-03-2001 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
Vulnerable Configurations
-
cpe:2.3:a:lotus:domino_mail_server:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.1:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.2:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.2b:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.2b:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.3:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.4:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.5:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.0:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.6:*:*:*:*:*:*:*
-
cpe:2.3:a:lotus:domino_mail_server:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino_mail_server:5.0.7:*:*:*:*:*:*:*
CWE
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | PARTIAL | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| cert-vn | VU#176972 |
| confirm | http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603 |
| xf | lotus-domino-smtp-mail-relay(6591) |