CVE-2009-1286

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-13 · updated 2026-06-16

Description

The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities.

Affected products

IBM Lotus Domino: 8.0, 8.0.1, 8.0.2, 8.0.2.1

References

http://secunia.com/advisories/34657
http://securitytracker.com/id?1022024
http://www-01.ibm.com/support/docview.wss?uid=swg21379894
http://www-01.ibm.com/support/docview.wss?uid=swg21379915
http://www-01.ibm.com/support/docview.wss?uid=swg21381562
http://www-01.ibm.com/support/docview.wss?uid=swg21381566
http://www.securityfocus.com/bid/34441
http://www.vupen.com/english/advisories/2009/0986
http://secunia.com/advisories/34657
http://securitytracker.com/id?1022024
http://www-01.ibm.com/support/docview.wss?uid=swg21379894
http://www-01.ibm.com/support/docview.wss?uid=swg21379915

Get alerted when CVE-2009-1286 or the next vulnerability affects your stack