CVE-2003-0123

Current Description

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.

Basic Data

Published	March 18, 2003
Last Modified	November 22, 2017
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-Other
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	NONE
CVSS 2 - Availability Impact	PARTIAL
CVSS 2 - Base Score	5.0
Severity	MEDIUM
Exploitability Score	10.0
Impact Score	2.9
Obtain All Privilege	false
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

No data provided.

Configurations

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	Ibm	Lotus Domino	4.6.1	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	4.6.3	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	4.6.4	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.1	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.2	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.3	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.4	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.4a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.5	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.6	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.6a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.7	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.7a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.8	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.8a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.9	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.9a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.10	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Domino	5.0.11	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.1	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.2	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.3	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.4	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.5	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.9a	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.10	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	5.0.11	*	*	*	*	*	*	*
2.3	Application	Ibm	Lotus Notes Client	r5	*	*	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
Ibm	Lotus Notes Client	5.0, 5.0.1, 5.0.10, 5.0.11, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.9a, r5
Ibm	Lotus Domino	4.6.1, 4.6.3, 4.6.4, 5.0, 5.0.1, 5.0.10, 5.0.11, 5.0.2, 5.0.3, 5.0.4, 5.0.4a, 5.0.5, 5.0.6, 5.0.6a, 5.0.7, 5.0.7a, 5.0.8, 5.0.8a, 5.0.9, 5.0.9a

References

Name	Source	URL	Tags
20030313 R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow	http://marc.info/?l=bugtraq&m=104757545500368&w=2	BUGTRAQ	Mailing List Third Party Advisory
CA-2003-11	http://www.cert.org/advisories/CA-2003-11.html	CERT	Third Party Advisory US Government Resource
N-065	http://www.ciac.org/ciac/bulletins/n-065.shtml	CIAC	Broken Link
VU#411489	http://www.kb.cert.org/vuls/id/411489	CERT-VN	Third Party Advisory US Government Resource
http://www.rapid7.com/advisories/R7-0011.html	http://www.rapid7.com/advisories/R7-0011.html	MISC	Not Applicable
7038	http://www.securityfocus.com/bid/7038	BID	Third Party Advisory VDB Entry
http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060	http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060	CONFIRM	Patch Vendor Advisory
lotus-web-retriever-bo(11525)	https://exchange.xforce.ibmcloud.com/vulnerabilities/11525	XF	Third Party Advisory VDB Entry