|
|
Lotus Notes/Domino LDAP服务漏洞
发布时间：2003-03-06
更新时间：2003-03-13
严重程度：高
威胁程度：普通用户访问权限
错误类型：边界检查错误
利用方式：服务器模式
BUGTRAQ ID：7039
CVE(CAN) ID：CAN-2001-1311
受影响系统Lotus Domino 4.6.1
-Microsoft Windows NT 4.0
Lotus Domino 4.6.3
Lotus Domino 4.6.4
-Microsoft Windows NT 4.0
Lotus Domino 5.0
Lotus Domino 5.0.1
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.2
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.3
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.4 a
Lotus Domino 5.0.4
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.5 -french
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Server
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.5
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Domino 5.0.6 a
Lotus Domino 5.0.6
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows 2000 Workstation SP1
-Microsoft Windows 2000 Workstation SP2
-Microsoft Windows NT 4.0
-Microsoft Windows NT 4.0 SP1
-Microsoft Windows NT 4.0 SP2
-Microsoft Windows NT 4.0 SP3
-Microsoft Windows NT 4.0 SP4
-Microsoft Windows NT 4.0 SP5
-Microsoft Windows NT 4.0 SP6
-Microsoft Windows NT 4.0 SP6a
-Sun Solaris 8.0
Lotus Domino 5.0.7
-HP HP-UX 9.9
-IBM AIX 4.3
-IBM OS/2 4.5 Warp
-IBM OS/390 V2R9
-Linux kernel 2.3
-Microsoft Windows 2000 Workstation
-Microsoft Windows NT 4.0
-Sun Solaris 8.0
Lotus Notes Client R5
Lotus Notes Client 5.0
Lotus Notes Client 5.0.1
Lotus Notes Client 5.0.2
Lotus Notes Client 5.0.3
Lotus Notes Client 5.0.4
Lotus Notes Client 5.0.5 详细描述
Lotus Notes/Domino的LDAP协议实现存在漏洞，远程攻击者可能利用这个漏洞提交精心构建的数据执行任意命令。
这个漏洞影响Lotus Notes/Domino R6 pre-release和beta版以及Lotus Domino R5.0.7和更早的版本。
相关信息
报告：Rapid7, Inc
相关信息：http://www.rapid7.com/advisories/R7-0012.html
|
