Home  >  CVE-2003-0178
CVE Details for CVE: CVE-2003-0178
Summary
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Timestamps
Last major update 11-07-2017 - 01:29
Published 02-04-2003 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:lotus_domino_web_server:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:lotus_domino_web_server:6.0:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid
  • 6870
  • 6871
bugtraq
  • 20030217 Domino Advisories UPDATE
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
cert CA-2003-11
cert-vn
  • VU#206361
  • VU#542873
  • VU#772817
ciac N-065
misc
ntbugtraq
  • 20030217 Domino Advisories UPDATE
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
vulnwatch
  • 20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
  • 20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
  • 20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)
xf
  • lotus-domino-hostname-bo(11337)
  • lotus-domino-inotes-bo(11336)