VulnerabilityModified

CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.

EXPLOIT ×3 ✓HIGH 10.0EPSS 62.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 62.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 62.20% probability · 99th percentile
Public exploits: 3 in Exploit-DB · verified · first 29 March 2007
CISA KEV: Not listed
Affected: ibm/lotus domino
Source: cve@mitre.org

EPSS trend

EPSS 62.2% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (3)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-4207 source ↗	Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflowwindows · dmc & prdelka	remote	20 July 2007	yes
EDB-3616 source ↗	IBM Lotus Domino Server 6.5 - Remote Overflowwindows · muts	remote	31 March 2007	yes
EDB-3602 source ↗	IBM Lotus Domino Server 6.5 - 'Username' Remote Denial of Servicewindows · Winny Thomas	dos	29 March 2007	yes

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.