Korean
<< Back
VID 18113
Severity 30
Port 143
Protocol TCP
Class IMAP
Detailed Description The IBM Lotus Domino's IMAP server, according to its banner, has a Heap-based buffer overflow vulnerability. IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port.

* Note: This check solely relied on the banner of the remote IMAP server to assess this vulnerability, so this might be a false positive.

* References:
http://securitytracker.com/id?1023456

* Platforms Affected:
IBM/Lotus Software Group, Lotus Domino Server versions 8.x prior to 8.5 FP1
Any operating system Any version
Recommendation No upgrade or patch available as of June 2014.
Related URL CVE-2010-0358 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)