Lotus Domino LDAP Server Crafted Packet Remote DoS

Medium Nessus Plugin ID 20890

Synopsis

The remote LDAP server is affected by a denial of service vulnerability.

Description

The LDAP server on the remote host appears to have crashed after being sent a malformed request. The specific request used is known to crash the LDAP server in Lotus Domino 7.0. By leveraging this flaw, an attacker may be able to deny service to legitimate users.

Solution

Unknown at this time.

See Also

http://seclists.org/dailydave/2006/q1/110

Plugin Details

Severity: Medium

ID: 20890

File Name: lotus_domino_ldap_dos.nasl

Version: 1.16

Type: remote

Published: 2006/02/13

Modified: 2018/07/14

Dependencies: 20870, 14664, 17975

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:lotus_domino

Exploit Available: false

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2006-0580

BID: 16523