CVE-2011-3575

EPSS 11.1%

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/36145unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/69802 http://www.research.reversingcode.com/exploits/IBMLotusDomino_StackOverflowPoC http://www.research.reversingcode.com/index.php/advisories/73-ibm-ssd-1012211 http://www.securityfocus.com/bid/49705