First published: Tue Mar 18 2003(Updated: )
Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Lotus Notes Client | =5.0.4 | |
Ibm Lotus Notes Client | =5.0.11 | |
IBM Lotus Domino | =5.0.4 | |
IBM Lotus Domino | =5.0.2 | |
Ibm Lotus Notes Client | =r5 | |
IBM Lotus Domino | =4.6.4 | |
Ibm Lotus Notes Client | =5.0.5 | |
Ibm Lotus Notes Client | =5.0 | |
Ibm Lotus Notes Client | =5.0.2 | |
IBM Lotus Domino | =5.0.5 | |
IBM Lotus Domino | =5.0.6 | |
IBM Lotus Domino | =5.0.6a | |
Ibm Lotus Notes Client | =5.0.10 | |
IBM Lotus Domino | =4.6.1 | |
IBM Lotus Domino | =5.0.8a | |
IBM Lotus Domino | =5.0.9a | |
Ibm Lotus Notes Client | =5.0.9a | |
IBM Lotus Domino | =4.6.3 | |
IBM Lotus Domino | =5.0 | |
IBM Lotus Domino | =5.0.1 | |
IBM Lotus Domino | =5.0.11 | |
Ibm Lotus Notes Client | =5.0.1 | |
IBM Lotus Domino | =5.0.3 | |
IBM Lotus Domino | =5.0.4a | |
IBM Lotus Domino | =5.0.8 | |
IBM Lotus Domino | =5.0.9 | |
Ibm Lotus Notes Client | =5.0.3 | |
IBM Lotus Domino | =5.0.7a | |
IBM Lotus Domino | =5.0.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0122 is considered a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2003-0122, upgrade your IBM Lotus Notes or Domino server to the latest version, ideally 5.0.11 or later.
CVE-2003-0122 affects multiple versions of IBM Lotus Notes and IBM Lotus Domino prior to version 5.0.11.
An attacker can exploit CVE-2003-0122 by sending specially crafted requests during NotesRPC authentication to execute arbitrary code.
While CVE-2003-0122 primarily impacts older software versions, organizations still using affected versions should prioritize patching to mitigate risk.