CVE

Id
4480  
CVE No.
CVE-2002-0086  
Status
Candidate  
Description
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.  
Phase
Modified (20050528)  
Votes
ACCEPT(3) Cole, Foat, Green | MODIFY(1) Balinsky | NOOP(3) Christey, Wall, Ziese  
Comments
Christey> Consider adding BID:4317 | Christey> Consider adding BID:4319 | CHANGE> [Balinsky changed vote from ACCEPT to MODIFY] | Balinsky> Should say 5.0.4 through 5.0.9 (not including version 5.0.9a, which includes the fix) | Balinsky> Additional Modification: Should say "Linux and Solaris" | CHANGE> [Foat changed vote from NOOP to ACCEPT] | Christey> CONFIRM:http://www-1.ibm.com/support/manager.wss?rs=463&rt=0&org=sims&doc=92579CFD6F92B39A85256B7D006AC89B | CONFIRM:http://www-1.ibm.com/support/manager.wss?rs=463&rt=0&org=sims&doc=D52DF997ABFFFC8385256B7D0062AD5C | VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4126 - Lotus Domino bindsock Notes_ExecDirectory buffer overflow vulnerability | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0046.html | VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4124 - Lotus Domino bindsock PATH buffer overflow vulnerability | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0044.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22051 4480 CVE-2002-0086 MISC:http://www.esecurityonline.com/advisories/eSO4126.asp  View
22052 4480 CVE-2002-0086 MISC:http://www.esecurityonline.com/advisories/eSO4124.asp  View
22053 4480 CVE-2002-0086 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21100441  View
22054 4480 CVE-2002-0086 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21095569  View
22055 4480 CVE-2002-0086 BID:4317  View
22056 4480 CVE-2002-0086 URL:http://www.securityfocus.com/bid/4317  View
22057 4480 CVE-2002-0086 BID:4319  View
22058 4480 CVE-2002-0086 URL:http://www.securityfocus.com/bid/4319  View
22059 4480 CVE-2002-0086 XF:lotus-domino-notes-execdirectory-bo(8583)  View
22060 4480 CVE-2002-0086 URL:http://xforce.iss.net/xforce/xfdb/8583  View
22061 4480 CVE-2002-0086 XF:lotus-domino-path-bo(8585)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64180 JVNDB-2001-000154 IBM Lotus Domino の bindsock におけるバッファオーバーフローの脆弱性 IBM Lotus Domino に実装される bindsock には、PATH および Notes_ExecDirectory 環境変数のチェックを十分に行わない不備のため、バッファオーバーフローの脆弱性が存在します。 CVE-2002-0086 4480 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000154.html  View