CERTA-2002-AVI-023
Vulnerability from certfr_avis - Published: - Updated:
Un utilisateur distant mal intentionné peut, par le biais de requêtes CGI judicieusement composées, provoquer un déni de service sur le serveur.
Description
Deux vulnérabilités concernant la gestion des requêtes CGI sont présentes dans le serveur Web Lotus Domino. Une mauvaise interprétation des requêtes contenant des noms de périphérique DOS entraîne une augmentation de la consommation des ressources du serveur. L'envoi de nombreuses requêtes spécifiques peut provoquer un deni de service.
Solution
Télécharger la mise à jour ( version 5.0.9a ) :
http://www.notes.net/qmrdown.nsf
Serveur Web Lotus Domino sur plate forme Windows.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eServeur Web Lotus Domino sur plate forme Windows.\u003c/P\u003e",
"content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s concernant la gestion des requ\u00eates CGI sont\npr\u00e9sentes dans le serveur Web Lotus Domino. Une mauvaise interpr\u00e9tation\ndes requ\u00eates contenant des noms de p\u00e9riph\u00e9rique DOS entra\u00eene une\naugmentation de la consommation des ressources du serveur. L\u0027envoi de\nnombreuses requ\u00eates sp\u00e9cifiques peut provoquer un deni de service.\n\n## Solution\n\nT\u00e9l\u00e9charger la mise \u00e0 jour ( version 5.0.9a ) :\n\n http://www.notes.net/qmrdown.nsf\n",
"cves": [],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Lotus ( JCHN4UMKLA et JCHN547JWV ) :",
"url": "http://www.notes.net/r5fixlist.nsf/"
}
],
"reference": "CERTA-2002-AVI-023",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2002-02-07T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
}
],
"summary": "Un utilisateur distant mal intentionn\u00e9 peut, par le biais de requ\u00eates\nCGI judicieusement compos\u00e9es, provoquer un d\u00e9ni de service sur le\nserveur.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans le serveur Web Lotus Domino",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin Lotus",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…