VulnerabilityModified

CVE-2003-0123

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.

MEDIUM 5.0EPSS 3.43%

Does this matter?

Lower severity and a low EPSS score (3.43%). Track it; it rarely justifies an emergency change on its own.

Description

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 3.43% probability · 88th percentile
CISA KEV: Not listed
Affected: ibm/lotus domino · ibm/lotus notes client
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=104757545500368&w=2Mailing List, Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060Patch, Vendor Advisory
http://www.cert.org/advisories/CA-2003-11.htmlThird Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/n-065.shtmlBroken Link
http://www.kb.cert.org/vuls/id/411489Third Party Advisory, US Government Resource
http://www.rapid7.com/advisories/R7-0011.htmlNot Applicable
http://www.securityfocus.com/bid/7038Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11525Third Party Advisory, VDB Entry
http://marc.info/?l=bugtraq&m=104757545500368&w=2Mailing List, Third Party Advisory
http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060Patch, Vendor Advisory
http://www.cert.org/advisories/CA-2003-11.htmlThird Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/n-065.shtmlBroken Link
http://www.kb.cert.org/vuls/id/411489Third Party Advisory, US Government Resource
http://www.rapid7.com/advisories/R7-0011.htmlNot Applicable
http://www.securityfocus.com/bid/7038Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11525Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.