Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2011-0914

EPSS 11.11% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0914

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Lotus Domino服务器DIIOP实现ndiiop.exe整数符号错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Lotus Domino(又名IBM Domino)是美国IBM公司的一套用于托管社交商务应用的平台。该平台提供一个管理客户端和Web浏览器界面,并具有易于管理、总拥有成本低、高度安全等特点。 IBM Lotus Domino 8.5.3之前版本中的服务器中的DIIOP实现中的ndiiop.exe中存在整数符号错误漏洞。远程攻击者可以借助GIOP客户端请求执行任意代码。该漏洞导致了基于堆的缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0914

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0914

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-02-08 · 21 CVEs total

CVE-2011-0915IBM Lotus Domino nrouter.exe栈缓冲区溢出漏洞
CVE-2011-0910Vanilla Forums cookie实现任意用户账户访问漏洞
CVE-2011-0909Vanilla Forums跨站脚本攻击漏洞
CVE-2011-0908Vanilla Forums开放重定向漏洞
CVE-2011-0526Vanilla Forums index.php跨站脚本攻击漏洞
CVE-2011-0920IBM Lotus Domino远程控制台认证绕过和任意代码执行漏洞
CVE-2011-0919IBM Lotus Domino POP3和IMAP服务多个栈缓冲区溢出漏洞
CVE-2011-0918IBM Lotus Domino Nrouter服务栈缓冲区溢出漏洞
CVE-2011-0917IBM Lotus Domino nLDAP.exe缓冲区溢出漏洞
CVE-2011-0916IBM Lotus Domino SMTP服务栈缓冲区溢出漏洞
CVE-2010-4728Zikula rand和srand PHP函数加密问题漏洞
CVE-2011-0913IBM Lotus Domino服务器DIIOP实现ndiiop.exe栈缓冲区溢出漏洞
CVE-2011-0912IBM Lotus Notes参数注入漏洞
CVE-2011-0911Zikula Users模块跨站脚本攻击漏洞
CVE-2011-0887Smc_Networks SMC SMCD3G-CCR web管理门户会话劫持漏洞
CVE-2011-0886Smc_Networks SMC SMCD3G-CCR web界面多个跨站请求伪造漏洞
CVE-2011-0885Smc_Networks SMC SMCD3G-CCR Comcast Business Gateway配置信任管理漏洞
CVE-2011-0538Wireshark '.pcap'文件内存破坏漏洞
CVE-2011-0535Zikula Users模块跨站请求伪造漏洞
CVE-2010-4729Zikula跨站请求伪造漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2011-0914

No comments yet


Leave a comment