Published: 16/09/2010 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x prior to 8.0.2 FP5 and 8.5.x prior to 8.5.1 FP2 allows remote malicious users to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm lotus domino 8.0.1
ibm lotus domino 8.5.0
ibm lotus domino 8.5.1
ibm lotus domino 8.5.1.1
ibm lotus domino 8.0.2.2
ibm lotus domino 8.0.2.3
ibm lotus domino 8.0.2
ibm lotus domino 8.0.2.1
ibm lotus domino 8.0
ibm lotus domino 8.0.2.4
ibm lotus domino 8.5.0.1

## # $Id: domino_icalendar_organizerrb 12236 2011-04-04 17:43:34Z sinn3r $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/ ...

source: labsmwrinfosecuritycom/advisories/lotus_domino_ical_stack_buffer_overflow/ IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Package Name: Lotus Domino Server Date Reported: 2010-01-09 Affected Versions: Versions 80 and 85 on AIX, AIX 64bit, Linux, Linux iSeries, Linux ...

CWE-119 http://www.vupen.com/english/advisories/2010/2381 http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/http://www-01.ibm.com/support/docview.wss?uid=swg21446515 http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument http://securitytracker.com/id?1024448 http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument http://secunia.com/advisories/41433 http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf http://www.securityfocus.com/bid/43219 http://www.zerodayinitiative.com/advisories/ZDI-10-177/http://www.exploit-db.com/exploits/15005 https://exchange.xforce.ibmcloud.com/vulnerabilities/61790 http://www.securityfocus.com/archive/1/513706/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/17151/

CVE-2010-3407

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect