CVE-2011-0913
N/A
Published: February 8, 2011 at 09:00 PM UTC
Updated: June 16, 2026 at 11:28 PM UTC
1 product affected across 1 vendorLotus Domino
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 8.5.2.24.6.14.6.34.6.45.05.0.15.0.105.0.115.0.25.0.35.0.45.0.4a5.0.55.0.65.0.6a5.0.75.0.7a5.0.85.0.8a5.0.95.0.9a6.06.0.16.0.1.16.0.1.26.0.1.36.0.26.0.2.16.0.2.26.0.2_cf26.0.36.0.46.0.56.56.5.06.5.16.5.26.5.2.16.5.36.5.3.16.5.46.5.4.16.5.4.26.5.4.36.5.56.5.67.07.0.17.0.1.17.0.27.0.2.17.0.2.27.0.2.37.0.37.0.3.17.0.47.0.4.17.0.4.28.0.18.0.28.0.2.18.0.2.28.0.2.38.0.2.48.0.2.58.0.2.68.5.18.5.1.18.5.1.28.5.1.38.5.1.48.5.1.58.5.28.5.2.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
x_refsource_CONFIRMx_refsource_MISCVendor Advisory
Source: [email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg21461514Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card