Intrusion PreventionIBM.Lotus.Domino.Web.Server.HTTP.Header.Buffer.Overflow
Description
This indicates an attack attempt against a Buffer Overflow vulnerability in multiple vendor's products.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP request with an overly long header string. It allows a remote attacker to cause a Denial of Service or execute arbitrary code.
Affected Products
Macromedia JRun 4.0 and previous versions.
HP OpenView Network Node Manager 7.53 and previous versions.
IBM Tivoli Storage Manager 5.4 Client and previous versions.
IBM Lotus Domino 8.0 and previous versions.
Oracle BEA Systems WebLogic Workshop 8.1 SP 6 and previous versions.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Denial of service.
Recommended Actions
Contact your vendor for upgrade or patch information.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 27994 |
| Created | Jul 21, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2008-2240 |
| Exploit Prediction Score | 97.06% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, Solaris |
| Affected App | Adobe, HP, IBM, Other |