CVE-2001-0260

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/3321
http://www.securityfocus.com/bid/2283Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5993
http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/3321
http://www.securityfocus.com/bid/2283Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5993

Timeline

Published: Jun 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-02612.1Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to CVE-2001-02627.5Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.CVE-2001-02637.5Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MD CVE-2001-02645.0Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file th CVE-2001-02652.1ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored fi CVE-2001-02667.2Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.CVE-2001-02677.2NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.CVE-2001-02687.2The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not va CVE-2001-026910.0pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.CVE-2001-02705.0Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malforme CVE-2001-027110.0mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.CVE-2001-02725.0Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via