CVE-2005-0986
published 2005-05-02CVE-2005-0986: NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
6.99%
93.5th percentile
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_domino_server | — | — |
| ibm | lotus_domino_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htmhttp://secunia.com/advisories/14858http://www-1.ibm.com/support/docview.wss?uid=swg21202446http://www.idefense.com/application/poi/display?id=224&type=vulnerabilitieshttp://www.vupen.com/english/advisories/2005/0322http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htmhttp://secunia.com/advisories/14858http://www-1.ibm.com/support/docview.wss?uid=swg21202446http://www.idefense.com/application/poi/display?id=224&type=vulnerabilitieshttp://www.vupen.com/english/advisories/2005/0322
2005-05-02
Published