CVE-2015-0134: Buffer Overflow

Published Apr 6, 2015

Updated

Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Software

5 affected components

IBM Domino=8.5.0

IBM Domino=8.5.1

IBM Domino=8.5.2

IBM Domino=8.5.3

IBM Domino=9.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21700029

Event History

Apr 6, 2015

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0134?

CVE-2015-0134 is considered a critical vulnerability due to its potential to enable remote code execution.

How do I fix CVE-2015-0134?

To fix CVE-2015-0134, upgrade IBM Domino to the specified patched versions: 8.5.1 FP5 IF3, 8.5.2 FP4 IF3, 8.5.3 FP6 IF6, 9.0 IF7, or 9.0.1 FP2 IF3.

Who is affected by CVE-2015-0134?

CVE-2015-0134 affects users of IBM Domino versions 8.5.0 through 9.0.1 before specific fix packs.

What types of attacks can exploit CVE-2015-0134?

CVE-2015-0134 can be exploited by remote attackers to execute arbitrary code through a buffer overflow.

Is CVE-2015-0134 still a threat?

CVE-2015-0134 remains a threat to systems that have not been updated to the patched versions.