Description
Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33278 ↗
- http://www.securitytracker.com/id?1017825 ↗
- http://www.securityfocus.com/bid/23173 ↗
- http://www.securityfocus.com/bid/23174 ↗
- http://secunia.com/advisories/24633 ↗
- http://www-1.ibm.com/support/docview.wss?uid=swg21257248 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=494 ↗
- http://www.vupen.com/english/advisories/2007/1133 ↗
- http://www.kb.cert.org/vuls/id/927988 ↗