Lotus Domino is prone to an overflow condition. The Web Server fails to properly sanitize the If-Modified-Since header resulting in a stack overflow. With a specially crafted HTTP request, a remote attacker can potentially cause remote code execution.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch / RCS
Exploit:
Exploit Commercial
Disclosure:
Vendor Verified
OSVDB:
Web Related
Solution
Upgrade to version 7.0.2 Fix Pack 2 (FP2) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
