First published: Mon Dec 14 2020(Updated: )
A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with the privileges of the server.
Credit: psirt@hcl.com
Affected Software | Affected Version | How to fix |
---|---|---|
Hcltech Domino | >=9.0.0<10.0.1 | |
Hcltech Domino | =10.0.1-fix_pack_1 | |
Hcltech Domino | =10.0.1-fix_pack_2 | |
Hcltech Domino | =10.0.1-fix_pack_3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-14244 is a vulnerability in the MIME message handling of the Domino server (versions 9 and 10) that could be exploited by an unauthenticated attacker resulting in a stack buffer overflow.
CVE-2020-14244 can be exploited by an unauthenticated attacker injecting code into the system, which would execute with the server's privileges, potentially crashing the server.
CVE-2020-14244 has a severity rating of 9.8, which is considered critical.
CVE-2020-14244 affects versions 9 and 10 of the Domino server.
To fix CVE-2020-14244, upgrade to a fixed version of the Domino server, such as 10.0.1 Fix Pack 3.