CVE Details for CVE: CVE-2003-0180
Summary
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 02-04-2003 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://www.nextgenss.com/advisories/lotus-60dos.txt
- http://www.cert.org/advisories/CA-2003-11.html
- http://www.kb.cert.org/vuls/id/355169
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html
- http://www-1.ibm.com/support/docview.wss?uid=swg21104528
- http://www.ciac.org/ciac/bulletins/n-065.shtml
- http://www.securityfocus.com/bid/6951
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11360
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | NONE | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 6951 |
| cert | CA-2003-11 |
| cert-vn | VU#355169 |
| ciac | N-065 |
| confirm | http://www-1.ibm.com/support/docview.wss?uid=swg21104528 |
| misc | http://www.nextgenss.com/advisories/lotus-60dos.txt |
| vulnwatch | 20030218 More Lotus Domino Advisories |
| xf | lotus-incomplete-post-dos(11360) |