HTTP.Accept-Language.Header.Buffer.Overflow

Description

This indicates an attempt to exploit a buffer-overflow vulnerability in IBM Lotus Domino.
This vulnerability is caused by the Web Server service's inability to check user-supplied input. A remote attacker may send an HTTP request with an overly long "Accept-Language" header, causing the affected to server to crash or possibly execute arbitrary code.

Affected Products

IBM Lotus Domino 7.0.3
IBM Lotus Domino 7.0
IBM Lotus Domino 6.5 .0
IBM Lotus Domino 6.0
IBM Lotus Domino 8.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.
Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Apply the patch from the vendor, or upgrade to a non-vulnerable version.
More information can be found at the following website:

References