← All CVEs

CVE-2003-0122

medium · 5

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

5
CVSS
10.1%
EPSS (exploit prob.)
95th
EPSS percentile
2003-03-18
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
ibmlotus_domino4.6.1
ibmlotus_domino4.6.3
ibmlotus_domino4.6.4
ibmlotus_domino5.0
ibmlotus_domino5.0.1
ibmlotus_domino5.0.2
ibmlotus_domino5.0.3
ibmlotus_domino5.0.4
ibmlotus_domino5.0.4a
ibmlotus_domino5.0.5
ibmlotus_domino5.0.6
ibmlotus_domino5.0.6a
ibmlotus_domino5.0.7a
ibmlotus_domino5.0.8
ibmlotus_domino5.0.8a
ibmlotus_domino5.0.9
ibmlotus_domino5.0.9a
ibmlotus_domino5.0.10
ibmlotus_domino5.0.11
ibmlotus_notes_client5.0
ibmlotus_notes_client5.0.1
ibmlotus_notes_client5.0.2
ibmlotus_notes_client5.0.3
ibmlotus_notes_client5.0.4
ibmlotus_notes_client5.0.5
ibmlotus_notes_client5.0.9a
ibmlotus_notes_client5.0.10
ibmlotus_notes_client5.0.11
ibmlotus_notes_clientr5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0122