Sign-up

ID

VAR-200107-0173


CVE

CVE-2001-0444


TITLE

Lotus Domino vulnerable to DoS via crafted HTTP header requests

Trust: 0.8

sources: CERT/CC: VU#601312

DESCRIPTION

Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information. The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial of service. An HTTP request composed of numerous '/' sequences (approx 8k), will cause the server to consume all available system resources on the host

Trust: 2.7

sources: NVD: CVE-2001-0444 // CERT/CC: VU#601312 // CERT/CC: VU#642760 // BID: 2598 // VULHUB: VHN-3263

AFFECTED PRODUCTS

vendor:lotusmodel: - scope: - version: -

Trust: 1.6

vendor:ciscomodel:cbosscope:eqversion:2.3.053

Trust: 1.6

vendor:ciscomodel:cbosscope:eqversion:2.4.1

Trust: 1.6

vendor:lotusmodel:dominoscope:eqversion:5.0.6

Trust: 0.3

vendor:lotusmodel:dominoscope:eqversion:5.0.5

Trust: 0.3

vendor:lotusmodel:dominoscope:eqversion:5.0.4

Trust: 0.3

vendor:lotusmodel:dominoscope:eqversion:5.0.3

Trust: 0.3

vendor:lotusmodel:dominoscope:eqversion:5.0.2

Trust: 0.3

vendor:lotusmodel:dominoscope:eqversion:5.0.1

Trust: 0.3

vendor:lotusmodel:dominoscope:neversion:5.0.7

Trust: 0.3

sources: CERT/CC: VU#601312 // CERT/CC: VU#642760 // BID: 2598 // CNNVD: CNNVD-200107-038 // NVD: CVE-2001-0444

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2001-0444
value: LOW

Trust: 1.0

CARNEGIE MELLON: VU#601312
value: 9.98

Trust: 0.8

CARNEGIE MELLON: VU#642760
value: 10.50

Trust: 0.8

CNNVD: CNNVD-200107-038
value: LOW

Trust: 0.6

VULHUB: VHN-3263
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2001-0444
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-3263
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CERT/CC: VU#601312 // CERT/CC: VU#642760 // VULHUB: VHN-3263 // CNNVD: CNNVD-200107-038 // NVD: CVE-2001-0444

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-0444

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-200107-038

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200107-038

EXTERNAL IDS

db:NVDid:CVE-2001-0444

Trust: 1.7

db:BIDid:2635

Trust: 1.7

db:OSVDBid:1796

Trust: 1.7

db:BIDid:2598

Trust: 1.1

db:XFid:6347

Trust: 0.8

db:BIDid:2565

Trust: 0.8

db:CERT/CCid:VU#601312

Trust: 0.8

db:XFid:6351

Trust: 0.8

db:CERT/CCid:VU#642760

Trust: 0.8

db:BUGTRAQid:20010420 BUG IN CISCO CBOS V2.3.0.053

Trust: 0.6

db:XFid:6453

Trust: 0.6

db:CNNVDid:CNNVD-200107-038

Trust: 0.6

db:VULHUBid:VHN-3263

Trust: 0.1

sources: CERT/CC: VU#601312 // CERT/CC: VU#642760 // VULHUB: VHN-3263 // BID: 2598 // CNNVD: CNNVD-200107-038 // NVD: CVE-2001-0444

REFERENCES

url:http://www.securityfocus.com/bid/2635

Trust: 1.7

url:http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html

Trust: 1.7

url:http://www.osvdb.org/1796

Trust: 1.7

url:http://www.securityfocus.com/advisories/3208

Trust: 1.6

url:http://www.notes.net/r5fixlist.nsf/a8f0ffda1fc76c8985256752006aba6c?openview&start=3.111&count=30&expand=3.126#3.126

Trust: 1.6

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/6453

Trust: 1.1

url:http://www.securityfocus.com/bid/2565

Trust: 0.8

url:http://xforce.iss.net/static/6347.php

Trust: 0.8

url:http://www.securityfocus.com/bid/2598

Trust: 0.8

url:http://xforce.iss.net/static/6351.php

Trust: 0.8

url:http://xforce.iss.net/static/6453.php

Trust: 0.6

url:http://www.lotus.com/home.nsf/welcome/domino

Trust: 0.3

sources: CERT/CC: VU#601312 // CERT/CC: VU#642760 // VULHUB: VHN-3263 // BID: 2598 // CNNVD: CNNVD-200107-038 // NVD: CVE-2001-0444

CREDITS

Discovered and posted to Bugtraq by <peter.grundl@defcom.com> on April 11, 2001.

Trust: 0.3

sources: BID: 2598

SOURCES

db:CERT/CCid:VU#601312
db:CERT/CCid:VU#642760
db:VULHUBid:VHN-3263
db:BIDid:2598
db:CNNVDid:CNNVD-200107-038
db:NVDid:CVE-2001-0444

LAST UPDATE DATE

2026-02-07T20:10:33.096000+00:00


SOURCES UPDATE DATE

db:CERT/CCid:VU#601312date:2001-07-17T00:00:00
db:CERT/CCid:VU#642760date:2001-07-17T00:00:00
db:VULHUBid:VHN-3263date:2017-10-10T00:00:00
db:BIDid:2598date:2001-04-11T00:00:00
db:CNNVDid:CNNVD-200107-038date:2005-10-12T00:00:00
db:NVDid:CVE-2001-0444date:2025-04-03T01:03:51.193

SOURCES RELEASE DATE

db:CERT/CCid:VU#601312date:2001-07-12T00:00:00
db:CERT/CCid:VU#642760date:2001-07-12T00:00:00
db:VULHUBid:VHN-3263date:2001-07-02T00:00:00
db:BIDid:2598date:2001-04-11T00:00:00
db:CNNVDid:CNNVD-200107-038date:2001-07-02T00:00:00
db:NVDid:CVE-2001-0444date:2001-07-02T04:00:00