CVEvulnerability
CVE-2003-0179
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
Affected configurations
• ibm lotus domino web server 6.0
• ibm lotus notes client 6.0
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=104550124032513&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104550335103136&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104558778131373&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104558778331387&w=2 marc.info
- http://www-1.ibm.com/support/docview.wss?uid=swg21104543 www-1.ibm.com
- http://www.cert.org/advisories/CA-2003-11.html US Government Resource
- http://www.ciac.org/ciac/bulletins/n-065.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/571297 Patch, Third Party Advisory, US Government Resource
- http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt www.nextgenss.com
- http://www.securityfocus.com/bid/6872 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11339 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=104550124032513&w=2 marc.info
- http://marc.info/?l=bugtraq&m=104550335103136&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104558778131373&w=2 marc.info
- http://marc.info/?l=ntbugtraq&m=104558778331387&w=2 marc.info
- http://www-1.ibm.com/support/docview.wss?uid=swg21104543 www-1.ibm.com
- http://www.cert.org/advisories/CA-2003-11.html US Government Resource
- http://www.ciac.org/ciac/bulletins/n-065.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/571297 Patch, Third Party Advisory, US Government Resource
- http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt www.nextgenss.com
- http://www.securityfocus.com/bid/6872 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11339 exchange.xforce.ibmcloud.com