CVE-2003-0178

State: Published
Severity: Not scored
Published: Mar 29, 2003
Updated: Aug 8, 2024
Reserved: Mar 28, 2003

Description

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)mailing-list
VU#772817third-party-advisory
20030217 Domino Advisories UPDATEmailing-list
20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)mailing-list
20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)mailing-list
VU#542873third-party-advisory
20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)mailing-list
CA-2003-11third-party-advisory
20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)mailing-list
20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)mailing-list
lotus-domino-hostname-bo(11337)vdb-entry
VU#206361third-party-advisory
lotus-domino-inotes-bo(11336)vdb-entry
20030217 Domino Advisories UPDATEmailing-list
6870vdb-entry
N-065third-party-advisorygovernment-resource
20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)mailing-list
http://www.nextgenss.com/advisories/lotus-hostlocbo.txt
http://www.nextgenss.com/advisories/lotus-inotesoflow.txt
6871vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.