CVE-2006-0121

Published Jan 9, 2006

Last updated a year ago

Overview

Description: Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advisory.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.8
Impact score: 6.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C00B8057-26DF-4064-A934-0AA88A0C1A6F"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8EFA5487-2D61-4E61-98A3-51882A8CE0C4"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A95404CC-47B8-40C6-BCED-FC3E68CA8D8F"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F342FD1-7A60-4E7D-B56A-E1C3D560C728"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp1:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "99E2CC18-4049-470A-B6DB-580C65FED0A0"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2396543F-1507-493C-B57F-3082D6E68894"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "40882B15-23A7-456C-B4DB-B1C7246BBC28"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_domino_enterprise_server:6.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D3195CA-CB62-4AEF-AC8C-C985A372FD89"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1360A50E-C1E1-4690-874A-04CC7C1A77CC"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D94927A9-61FD-459F-9A6D-E581A4AF505C"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3B32BA2-9EB7-4294-A857-226A5B1CC401"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF64CA16-6C20-42E1-BA68-BD63A873BFA9"
          },
          {
            "criteria": "cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12D7DD7B-CA90-44A5-9B7B-4A4985150689"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References