CVE-2013-0486: Medium severity ibm lotus domino mail server vulnerability
Published Mar 27, 2013
·Updated
Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY.
Affected Software
16 affected components
IBM Lotus Domino=8.5.0
IBM Lotus Domino=8.5.0.1
IBM Lotus Domino=8.5.1
IBM Lotus Domino=8.5.1.1
IBM Lotus Domino=8.5.1.2
IBM Lotus Domino=8.5.1.3
IBM Lotus Domino=8.5.1.4
IBM Lotus Domino=8.5.1.5
IBM Lotus Domino=8.5.2.0
IBM Lotus Domino=8.5.2.1
IBM Lotus Domino=8.5.2.2
IBM Lotus Domino=8.5.2.3
IBM Lotus Domino=8.5.2.4
IBM Lotus Domino=8.5.3.0
IBM Lotus Domino=8.5.3.1
IBM Lotus Domino=8.5.3.2
Event History
Mar 27, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0486?
CVE-2013-0486 has a critical severity level due to its potential to cause denial of service by exhausting system memory.
2
How do I fix CVE-2013-0486?
To fix CVE-2013-0486, you should apply the latest security updates or patches provided by IBM for Lotus Domino.
3
What versions of IBM Lotus Domino are affected by CVE-2013-0486?
CVE-2013-0486 affects IBM Lotus Domino versions 8.5.0 through 8.5.3.2.
4
What impact does CVE-2013-0486 have on system performance?
CVE-2013-0486 can lead to significant memory consumption which may result in crashes of the HTTP server, impacting system performance.
5
Is CVE-2013-0486 exploitable remotely?
Yes, CVE-2013-0486 can be exploited remotely through crafted GET requests, making it a concern for web-facing servers.