Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1624

EPSS 5.33% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1624

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lotus Domino HTTP验证日志记录远程缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lotus Domino服务器是一款基于WEB合作的应用程序架构，运行在Linux/Unix和Microsoft Windows操作系统平台下。 当HTTP验证数据记录到'DOMLOG.NSF'数据库时缺少正确缓冲区边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以Lotus Domino服务进程权限在系统上执行任意指令。 Lotus Domino服务器在验证过程中存在一个缓冲区溢出问题，当服务程序允许记录日志到'DOMLOG.NSF'时，如果攻击者提交超长包含部分非ASCII字符的HTTP验
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1624

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1624

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-03-26 · 46 CVEs total

CVE-2005-0878MercuryBoard 跨站脚本攻击漏洞
CVE-2005-0881InterSpire ArticleLive 'rticles.newcomment'跨站脚本攻击漏洞
CVE-2005-0883DigitialHive 'Base.PHP'跨站脚本漏洞
CVE-2005-0886Invision Power Board HTML注入漏洞
CVE-2005-0887Double Choco Latte 多个任意代码漏洞
CVE-2005-0888Double Choco Latte多个漏洞
CVE-2005-0889Dream4 Koobi CMS 'Index.PHP'跨站脚本攻击漏洞
CVE-2005-0890Dream4 Koobi CMS Index.PHP SQL注入漏洞
CVE-2005-0885XMB Forum多个远程跨站脚本漏洞
CVE-2005-0879Vortex Portal远程PHP文件包含漏洞
CVE-2005-0880Vortex Portal content.php漏洞
CVE-2005-0877Dnsmasq多个远程漏洞
CVE-2005-0876Dnsmasq多个远程漏洞
CVE-2005-0875Cerulean Studios Trillian多个远程HTTP响应缓冲区溢出漏洞
CVE-2005-0874Cerulean Studios Trillian远程HTTP响应缓冲区溢出漏洞
CVE-2005-0873Oracle多个安全漏洞
CVE-2005-0872Topic Calendar Calendar_Scheduler.PHP跨站脚本攻击漏洞
CVE-2005-0871phpBB Topic Calendar漏洞
CVE-2005-0870PHPSysInfo多个跨站脚本漏洞
CVE-2005-0869phpSysInfo 信息泄露漏洞

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1624

No comments yet

Leave a comment