CVE-2003-0122: IBM Lotus Domino

Medium severity, CVSS 5.0. EPSS: 10.1% chance of exploitation in the next 30 days.

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.

Affected products

• IBM Lotus Domino: version 4.6.1 only; version 4.6.3 only; version 4.6.4 only; version 5.0 only; version 5.0.1 only; version 5.0.2 only; …
• IBM Lotus Notes Client: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0.5 only; …

Published 2003-03-18. Last modified 2026-06-16.