Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

IBM Lotus Domino 7/8.5 FP1 can crash server via crafted LDAP

CVE-2010-0358 · published 16 years ago
Summary

The Domino server software for versions 7 and 8.5 Fix Pack 1 can be forced to stop working if someone sends a specially crafted LDAP request containing an overly long string. This could shut down the service and might allow further unwanted actions. Apply the latest IBM security updates or patches to protect the server.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm lotus_domino 7.0
8.5.0.1
cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*
Original advisory text
Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long s...
Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published20 Jan 2010
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2010-0358 · NVD
Track software like this
Free during beta