Domino security issue -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

i'm not on the domino400 list, so someone might post this there.

*** {01.16.020} Cross - Multiple DoS attacks in Lotus Domino

Lotus Domino R5 prior to 5.0.7 contains multiple denial of service
attacks that could result in the Domino service crashing or consuming
large amounts of memory and CPU time. An attacker can trigger the
vulnerabilities by sending particular malformed HTTP headers in a
request, by sending a large amount of Unicode or URL encoded characters
in a HTTP request, by requesting a DOS device file name or by sending
large amounts of data to the listening CORBA service.

Lotus has confirmed all of the problems; Domino version 5.0.7 contains
the appropriate fixes.

Source: SecurityFocus Bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html

clipped from

http://www.sans.org/sansnews/.

This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.