CVE-2009-1286: Medium severity ibm lotus domino mail server vulnerability
Published Apr 13, 2009
·Updated
The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities.
Affected Software
4 affected components
IBM Lotus Domino=8.0
IBM Lotus Domino=8.0.1
IBM Lotus Domino=8.0.2
IBM Lotus Domino=8.0.2.1
Remediation
Patch Available
Patch Available
Event History
Apr 13, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1286?
CVE-2009-1286 has a moderate severity level due to its potential to cause a denial of service.
2
How do I fix CVE-2009-1286?
To mitigate CVE-2009-1286, update to IBM Lotus Domino version 8.0.2 FP1 IF1 or later, or version 8.5 IF3 or later.
3
What systems are affected by CVE-2009-1286?
CVE-2009-1286 affects IBM Lotus Domino versions 8.0, 8.0.1, 8.0.2, and 8.0.2.1.
4
What type of attack is CVE-2009-1286 associated with?
CVE-2009-1286 is associated with remote denial of service attacks through malformed MIME email messages.
5
Can CVE-2009-1286 be exploited by local users?
CVE-2009-1286 is exploitable by remote attackers, not local users.