CVE-2002-1624

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.

Affected products

IBM Lotus Domino: 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.4a (+8)

References

http://securitytracker.com/id?1004052
http://www.kb.cert.org/vuls/id/772563
http://www.securityfocus.com/bid/6646
https://exchange.xforce.ibmcloud.com/vulnerabilities/11058
http://securitytracker.com/id?1004052
http://www.kb.cert.org/vuls/id/772563
http://www.securityfocus.com/bid/6646
https://exchange.xforce.ibmcloud.com/vulnerabilities/11058

Get alerted when CVE-2002-1624 or the next vulnerability affects your stack