what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from A.Plaskett

IBM Lotus Domino iCalendar MAILTO Buffer Overflow

Posted Apr 6, 2011

Authored by sinn3r, A.Plaskett | Site metasploit.com

This Metasploit module exploits a vulnerability found in IBM Lotus Domino iCalendar. By sending a long string of data as the "ORGANIZER;mailto" header, process "nRouter.exe" crashes due to a Cstrcpy() routine in nnotes.dll, which allows remote attackers to gain arbitrary code execution. Note: In order to trigger the vulnerable code path, a valid Domino mailbox account is needed.

tags | exploit, remote, arbitrary, code execution

advisories | CVE-2010-3407, OSVDB-68040

SHA-256 | 58a0109fc5ef5bec16039ceb68600f3e20fe6be1a9d5c1104237dc5b1f0cde5e

Download | Favorite | View