CVE-2007-1739 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Lotus Domino

3 documents3 sources
Severity
7.8HIGHNVD
EPSS
15.4%
top 5.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Domino
Timeline
PublishedMar 28
Latest updateMay 1

Description

Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDibm/lotus_domino7.0, 7.0.1, 7.0.2+2

🔴Vulnerability Details

2
GHSA
GHSA-4j72-4c44-2fxp: Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6↗2022-05-01
▶
CVEList
CVE-2007-1739: Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6↗2007-03-28
▶
CVE-2007-1739 — IBM Lotus Domino vulnerability | cvebase