Explain CVE-2003-0178
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Affected Products: n/a
References: [{'name': '20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550063431463&w=2'}, {'name': 'VU#772817', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/772817'}, {'name': '20030217 Domino Advisories UPDATE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550335103136&w=2'}, {'name': '20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0080.html'}, {'name': '20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550063431461&w=2'}, {'name': 'VU#542873', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/542873'}, {'name': '20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0081.html'}, {'name': 'CA-2003-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-11.html'}, {'name': '20030217 Lotus Domino Web Server iNotes Overflow (#NISR17022003b)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104558777531350&w=2'}, {'name': '20030217 Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104558777331345&w=2'}, {'name': 'lotus-domino-hostname-bo(11337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11337'}, {'name': 'VU#206361', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/206361'}, {'name': 'lotus-domino-inotes-bo(11336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11336'}, {'name': '20030217 Domino Advisories UPDATE', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104558778331387&w=2'}, {'name': '6870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6870'}, {'name': 'N-065', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-065.shtml'}, {'name': '20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/lotus-hostlocbo.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/lotus-inotesoflow.txt'}, {'name': '6871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6871'}]
CVE State: PUBLISHED