Denial of Service Vulnerability in Lotus Domino R5 from IBM

CVE-2001-1313

Summary

Lotus Domino R5 prior to version R5.0.7a is susceptible to a denial of service attack that can lead to a crash of the application or potentially allow remote execution of arbitrary code. This vulnerability arises from the improper handling of packets featuring semi-valid BER (Basic Encoding Rules) encodings. The integrity of the package may be compromised through specially crafted input, as demonstrated by tests from the PROTOS LDAPv3 test suite. Administrators should ensure their systems are updated to the latest versions to mitigate this risk.

References