CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-011.html
http://www-1.ibm.com/support/docview.wss?uid=swg21257028	Patch
http://www.securityfocus.com/bid/23173	Patch
http://secunia.com/advisories/24633	Vendor Advisory
http://www.securityfocus.com/bid/23172
http://www.securitytracker.com/id?1017823
http://www.vupen.com/english/advisories/2007/1133
https://exchange.xforce.ibmcloud.com/vulnerabilities/33276

Configuration 1

cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:* cpe:2.3:a:ibm:lotus_domino:7.0.1:*:*:*:*:*:*:*

---

Published : 2007-03-28 09:19

Updated : 2017-07-29 01:30

---

NVD link : CVE-2007-1675

Mitre link : CVE-2007-1675

No products.

NVD-CWE-Other