CVE-2011-3575 | BDVDB-2026-47306 Detail

Description#

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/49705
https://exchange.xforce.ibmcloud.com/vulnerabilities/69802
http://www.research.reversingcode.com/index.php/advisories/73-ibm-ssd-1012211
http://www.research.reversingcode.com/exploits/IBMLotusDomino_StackOverflowPoC

Exploit#

No public exploit known

History#

Version 12011-09-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.