CVE - CVE-2002-0086

CVE-ID
CVE-2002-0086	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:4317 URL:http://www.securityfocus.com/bid/4317 BID:4319 URL:http://www.securityfocus.com/bid/4319 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21095569 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21100441 MISC:http://www.esecurityonline.com/advisories/eSO4124.asp MISC:http://www.esecurityonline.com/advisories/eSO4126.asp XF:lotus-domino-notes-execdirectory-bo(8583) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8583 XF:lotus-domino-path-bo(8585) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8585
Assigning CNA
MITRE Corporation
Date Record Created
20020306	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20050528)
Votes (Legacy)
ACCEPT(3) Cole, Foat, Green MODIFY(1) Balinsky NOOP(3) Christey, Wall, Ziese
Comments (Legacy)
Christey> Consider adding BID:4317 Christey> Consider adding BID:4319 CHANGE> [Balinsky changed vote from ACCEPT to MODIFY] Balinsky> Should say 5.0.4 through 5.0.9 (not including version 5.0.9a, which includes the fix) Balinsky> Additional Modification: Should say "Linux and Solaris" CHANGE> [Foat changed vote from NOOP to ACCEPT] Christey> CONFIRM:http://www-1.ibm.com/support/manager.wss?rs=463&rt=0&org=sims&doc=92579CFD6F92B39A85256B7D006AC89B CONFIRM:http://www-1.ibm.com/support/manager.wss?rs=463&rt=0&org=sims&doc=D52DF997ABFFFC8385256B7D0062AD5C VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4126 - Lotus Domino bindsock Notes_ExecDirectory buffer overflow vulnerability URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0046.html VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4124 - Lotus Domino bindsock PATH buffer overflow vulnerability URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0044.html
Proposed (Legacy)
20020315
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)