Detections
Analytics

Lotus Domino < 6.0.1 Multiple SMTP Vulnerabilities

high Nessus Network Monitor Plugin ID 2038

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote Lotus Domino server, according to its version number, is vulnerable to various buffer overflows and denial of service attacks. An attacker may use these to disable this server or execute arbitrary commands on the remote host.

Solution

Update to Domino 6.0.1 or higher.

See Also

http://www.nextgenss.com/advisories/lotus-hostlocbo.txt

Plugin Details

Severity: High

ID: 2038

Family: SMTP Servers

Published: 8/18/2004

Updated: 3/6/2019

Nessus ID: 11386

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:lotus_domino_web_server

Reference Information

CVE: CVE-2003-0178

BID: 6870, 6871