CVE-2001-0939: Medium severity Lotus Domino vulnerability
Published Nov 30, 2001
·Updated
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
Affected Software
9 affected components
Lotus Domino=5.0.6
Lotus Domino=5.0.4
Lotus Domino=5.0.1
Lotus Domino=5.0.3
Lotus Domino=5.0.2
Lotus Domino=5.0.5
Lotus Domino=5.0.7
Lotus Domino=5.0
Lotus Domino=5.0.8
Remediation
Patch Available
Event History
Nov 30, 2001
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0939?
CVE-2001-0939 has a severity that indicates it can cause a denial of service by crashing the Lotus Domino server.
2
How do I fix CVE-2001-0939?
To fix CVE-2001-0939, you should upgrade to a version of Lotus Domino that is newer than 5.0.8.
3
Which versions of Lotus Domino are affected by CVE-2001-0939?
CVE-2001-0939 affects Lotus Domino versions 5.0 to 5.0.8, including versions 5.0.1 through 5.0.7.
4
What type of attack does CVE-2001-0939 exploit?
CVE-2001-0939 exploits a vulnerability triggered by a SunRPC NULL command sent to port 443.
5
Can CVE-2001-0939 be exploited remotely?
Yes, CVE-2001-0939 can be exploited remotely by attackers to crash the affected Lotus Domino server.