CVE-2010-0358: Buffer Overflow
Published Jan 20, 2010
·Updated
Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087.
Affected Software
2 affected components
IBM Lotus Domino=8.5.0.1
IBM Lotus Domino=7.0
Event History
Jan 20, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0358?
CVE-2010-0358 is classified as a critical vulnerability that can lead to denial of service.
2
How do I fix CVE-2010-0358?
To mitigate CVE-2010-0358, upgrade to a fixed version of IBM Lotus Domino that addresses this vulnerability.
3
What software is affected by CVE-2010-0358?
CVE-2010-0358 affects IBM Lotus Domino versions 7.0 and 8.5.0.1.
4
What type of attack does CVE-2010-0358 exploit?
CVE-2010-0358 exploits a heap-based buffer overflow vulnerability via crafted LDAP messages.
5
Can CVE-2010-0358 allow remote attackers to execute code?
CVE-2010-0358 primarily allows denial of service, but it may have additional unspecified impacts.