{ "id": "CVE-2007-3510", "sourceIdentifier": "cve@mitre.org", "published": "2007-10-29T21:46:00.000", "lastModified": "2017-07-29T01:32:20.207", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name." }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el servicio IMAP de IBM Lotus Domino versiones anteriores a 6.5.6 FP2, y 7.x versiones anteriores a 7.0.3, permite a usuarios remotos autenticados ejecutar c\u00f3digo de su elecci\u00f3n mediante un nombre de buz\u00f3n de correo largo." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.0 }, "baseSeverity": "HIGH", "exploitabilityScore": 8.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-119" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "C709D66D-3AE7-48B7-9E27-5D1FE452643C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp1:*:*:*:*:*", "matchCriteriaId": "7B0B5F96-0762-45D3-B13E-1E4ED04AD69D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp2:*:*:*:*:*", "matchCriteriaId": "DB1EA406-6488-46C0-B857-0BFFAA65B258" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.5:*:fp3:*:*:*:*:*", "matchCriteriaId": "D36E3D33-5A60-4846-BED2-8BF3AFC9BBE2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "FB5AE863-C29F-4D32-8845-2D2426085071" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:6.5.6:*:fp1:*:*:*:*:*", "matchCriteriaId": "1DD8A9BA-5E05-47D8-9C15-60A49A3C3141" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "8FDDB5FD-9152-4A9C-829B-8BA2ACB3A5A1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "69495B18-39A4-443F-A724-F713C4DD14A2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp1:*:*:*:*:*", "matchCriteriaId": "4A7F62D7-8225-4B84-A3CE-B91616B5AAD9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:lotus_domino:7.0.2:*:fp2:*:*:*:*:*", "matchCriteriaId": "82718D37-02FA-4EA0-ABB6-167B5A0A2F0B" } ] } ] } ], "references": [ { "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=605", "source": "cve@mitre.org" }, { "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21270623", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/26176", "source": "cve@mitre.org" }, { "url": "http://www.securitytracker.com/id?1018854", "source": "cve@mitre.org" }, { "url": "http://www.vupen.com/english/advisories/2007/3598", "source": "cve@mitre.org" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37365", "source": "cve@mitre.org" } ] }