Rule--Sid13924--Summary:This event is generated when an attempt is made to exploit a known vulnerability in Lotus Domino.--Impact:Denial of Service. Information disclosure. Loss of integrity. Complete admin access.--Detailed Information:Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header.--Affected Systems:IBM Lotus Domino 6.0IBM Lotus Domino 6.5IBM Lotus Domino 7.0IBM Lotus Domino 8.0.1IBM Lotus Domino 8.0--Attack Scenarios:--Ease of Attack:--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.Apply the appropriate vendor supplied patches.--Contributors:Sourcefire Vulnerability Research TeamThis document was generated from data supplied by the National Vulnerability Database. A product of the National Institute of Standards and Technology.For more information see http://nvd.nist.gov/--Additional References:NIST CVE-2008-2240:http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2240--