// For flags

CVE-2015-0134

IBM Lotus Domino SSL2 Client Master Key Buffer Overflow Remote Code Execution Vulnerability

Severity Score

10.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors.

Desbordamiento de buffer en la implementación SSLv2 en IBM Domino 8.5.x anterior a 8.5.1 FP5 IF3, 8.5.2 anterior a FP4 IF3, 8.5.3 anterior a FP6 IF6, 9.0 anterior a IF7, y 9.0.1 anterior a FP2 IF3 permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability.
The flaw exists within the nldap.exe component which listens by default on TCP port 636. When handling Client Master Key Message packets, the process blindly copies attacker supplied data into an undersized buffer. A remote attacker could exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.

*Credits: Anonymous
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2014-11-18 CVE Reserved
  • 2015-04-06 CVE Published
  • 2024-01-24 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
 Domino
Search vendor "Ibm" for product "Domino"
 8.5.0
Search vendor "Ibm" for product "Domino" and version "8.5.0"
-
Affected
Ibm
Search vendor "Ibm"
 Domino
Search vendor "Ibm" for product "Domino"
 8.5.1
Search vendor "Ibm" for product "Domino" and version "8.5.1"
-
Affected
Ibm
Search vendor "Ibm"
 Domino
Search vendor "Ibm" for product "Domino"
 8.5.2
Search vendor "Ibm" for product "Domino" and version "8.5.2"
-
Affected
Ibm
Search vendor "Ibm"
 Domino
Search vendor "Ibm" for product "Domino"
 8.5.3
Search vendor "Ibm" for product "Domino" and version "8.5.3"
-
Affected
Ibm
Search vendor "Ibm"
 Domino
Search vendor "Ibm" for product "Domino"
 9.0.1
Search vendor "Ibm" for product "Domino" and version "9.0.1"
-
Affected