Domino weblog

probleem in HTTP-server: Buffer overflow in time/date velden

"Mark Litchfield of NGS Software reported a buffer overflow condition that can occur when submitting a large amount of data to certain time/date fields that can be updated from the Web".

Meer informatie over dit probleem is te vinden in deze technote.


Injection of content in HTTP header

"Juan C Calderon reported an issue where it is possible for the @SetHTTPHeader function to be misused to inject content into the header.

The @SetHTTPHeader function is only available to application developers. This vulnerability requires that the attacker have access to install a rogue application on the Lotus Domino server in order to execute this code. The impact of the vulnerability, if exploited, is HTTP response splitting or browser/proxy cache poisoning."
 
Opmerking: zoals duidelijk is, is dit beveiligingsprobleem alleen aan de orde, als de aanvaller in staat is een eigen applicatie op uw server te installeren; misbruik van buitenaf, zonder meer, is niet mogelijk.

Meer informatie over dit probleem is te vinden in deze technote.

Authenticatie tussen Notes client en Domino server

"Ollie Whitehouse of Symantec reported a format string vulnerability during authentication to the Lotus Domino server using the Notes protocol (NRPC). This vulnerability, if exploited by an attacker, could cause the server to crash, resulting in a Denial of Service.
This problem has not been demonstrated to result in execution of malicious code or compromise of the server's security."

Meer informatie over dit probleem is te vinden in deze technote.


Buffer overflow in Notes client

"Ollie Whitehouse of Symantec reported a buffer overflow condition in the NOTES.INI on the Lotus Notes client, which if exploited could cause the client to crash. This vulnerability cannot be remotely exploited by an attacker; local access to the NOTES.INI file is required.
This problem has not been demonstrated to result in execution of malicious code."

Meer informatie over dit probleem is te vinden in deze technote.


Tenslotte, een (schijnbaar?) niet-reproduceerbaar probleem

Onderstaand probleem is bij IBM aangemeld, maar IBM heeft het, ondanks uitgebreide tests, niet kunnen reproduceren. Met andere woorden, het probleem doet zich in de tests van IBM niet voor. Mocht u nu iets meemaken wat op de hier beschreven verschijnselen lijkt, dan wil IBM dat graag van u horen.

Dit is de tekst van de technote:

"iDEFENSE has reported that sending a long string of ASCII 430 characters to the Lotus Domino Web server will cause the server to stop responding. Is this a vulnerability?

This issue was reported to Quality Engineering as SPR# KSPR69FQUQ; it was thoroughly investigated and determined not to be reproducible in any version of the Domino server.

If any customers experience a server crash and believe it to be related to this issue, they should open a PMR with Lotus Technical Support, send us an NSD for debugging, and reference this SPR number in their report."

update 12-04-2005 Er is inmiddels wat meer informatie over dit veronderstelde probleem; zeker is dat het in Domino server ND6.5.3 niet meer voorkomt.