CVE-2011-1393: High severity ibm lotus domino mail server vulnerability
Published Dec 27, 2011
·Updated
Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.
Affected Software
18 affected components
IBM Lotus Domino<=8.5.2
IBM Lotus Domino=8.0
IBM Lotus Domino=8.0.1
IBM Lotus Domino=8.0.2
IBM Lotus Domino=8.0.2.1
IBM Lotus Domino=8.0.2.2
IBM Lotus Domino=8.0.2.3
IBM Lotus Domino=8.0.2.4
IBM Lotus Domino=8.0.2.5
IBM Lotus Domino=8.0.2.6
IBM Lotus Domino=8.0.5
IBM Lotus Domino=8.5.0
IBM Lotus Domino=8.5.1
IBM Lotus Domino=8.5.1.1
IBM Lotus Domino=8.5.1.2
IBM Lotus Domino=8.5.1.3
IBM Lotus Domino=8.5.1.4
IBM Lotus Domino=8.5.1.5
Event History
Dec 27, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1393?
CVE-2011-1393 has a medium severity rating as it can cause denial of service via a crafted Notes RPC packet.
2
How do I fix CVE-2011-1393?
To remediate CVE-2011-1393, upgrade to IBM Lotus Domino 8.5.2 FP4 or later versions.
3
What versions of IBM Lotus Domino are affected by CVE-2011-1393?
CVE-2011-1393 affects IBM Lotus Domino versions 8.0, 8.0.1, 8.0.2, 8.5.0, and 8.5.1 before 8.5.2 FP4.
4
Can CVE-2011-1393 be exploited remotely?
Yes, CVE-2011-1393 can be exploited remotely by attackers sending crafted Notes RPC packets.
5
What are the potential impacts of CVE-2011-1393?
The potential impact of CVE-2011-1393 is a denial of service, resulting in a crash of the Lotus Domino server.