VulnerabilityModified
CVE-2009-1286
The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities.
MEDIUM 5.0EPSS 1.84%
Does this matter?
Lower severity and a low EPSS score (1.84%). Track it; it rarely justifies an emergency change on its own.
Description
The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.84% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- ibm/lotus domino
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/34657Vendor Advisory
- http://securitytracker.com/id?1022024
- http://www-01.ibm.com/support/docview.wss?uid=swg21379894Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg21379915Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21381562Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21381566Exploit
- http://www.securityfocus.com/bid/34441
- http://www.vupen.com/english/advisories/2009/0986Vendor Advisory
- http://secunia.com/advisories/34657Vendor Advisory
- http://securitytracker.com/id?1022024
- http://www-01.ibm.com/support/docview.wss?uid=swg21379894Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg21379915Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21381562Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21381566Exploit
- http://www.securityfocus.com/bid/34441
- http://www.vupen.com/english/advisories/2009/0986Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.