CVE-2005-0986
First published: Wed Apr 06 2005(Updated: )
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Lotus Domino Server | =6.0.3 | |
| IBM Lotus Domino Server | =6.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/application/poi/display?id=224&type=vulnerabilities
- http://www-1.ibm.com/support/docview.wss?uid=swg21202446
- http://news.zdnet.co.uk/software/applications/0,39020384,39194293,00.htm
- http://secunia.com/advisories/14858
- http://www.vupen.com/english/advisories/2005/0322
- http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm
Frequently Asked Questions
What is the severity of CVE-2005-0986?
CVE-2005-0986 has a severity rating that indicates it allows for a denial of service attack against the affected IBM Lotus Domino Server versions.
How do I fix CVE-2005-0986?
To fix CVE-2005-0986, upgrade your IBM Lotus Domino Server to a version that is not affected by this vulnerability.
Which versions are affected by CVE-2005-0986?
CVE-2005-0986 affects IBM Lotus Domino Server versions 6.0.3 and 6.5.1, among potentially others.
What type of attack does CVE-2005-0986 exploit?
CVE-2005-0986 exploits a deep recursion vulnerability that can lead to a crash of the nHTTP.exe process.
Is CVE-2005-0986 a remote vulnerability?
Yes, CVE-2005-0986 is a remote vulnerability that allows attackers to crash the server through crafted GET requests.
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/tags
- agent/source
- vendor/ibm
- canonical/ibm lotus domino server
- version/ibm lotus domino server/6.5.1
- version/ibm lotus domino server/6.0.3