First published: Fri Nov 30 2001(Updated: )
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Domino | =5.0.6 | |
IBM Lotus Domino | =5.0.4 | |
IBM Lotus Domino | =5.0.1 | |
IBM Lotus Domino | =5.0.3 | |
IBM Lotus Domino | =5.0.2 | |
IBM Lotus Domino | =5.0.5 | |
IBM Lotus Domino | =5.0.7 | |
IBM Lotus Domino | =5.0 | |
IBM Lotus Domino | =5.0.8 |
http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0939 has a severity that indicates it can cause a denial of service by crashing the Lotus Domino server.
To fix CVE-2001-0939, you should upgrade to a version of Lotus Domino that is newer than 5.0.8.
CVE-2001-0939 affects Lotus Domino versions 5.0 to 5.0.8, including versions 5.0.1 through 5.0.7.
CVE-2001-0939 exploits a vulnerability triggered by a SunRPC NULL command sent to port 443.
Yes, CVE-2001-0939 can be exploited remotely by attackers to crash the affected Lotus Domino server.