CVE-2005-0986

NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted. NOTE: IBM has reported that it is unable to replicate this issue.

• http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm
• http://secunia.com/advisories/14858Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21202446Vendor Advisory
• http://www.idefense.com/application/poi/display?id=224&type=vulnerabilitiesVendor Advisory
• http://www.vupen.com/english/advisories/2005/0322
• http://news.zdnet.co.uk/software/applications/0%2C39020384%2C39194293%2C00.htm
• http://secunia.com/advisories/14858Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21202446Vendor Advisory
• http://www.idefense.com/application/poi/display?id=224&type=vulnerabilitiesVendor Advisory
• http://www.vupen.com/english/advisories/2005/0322

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0980PHP remote file inclusion vulnerability in index.php in Alst…
• CVE-2005-0981Multiple cross-site scripting (XSS) vulnerabilities in Alstr…
• CVE-2005-0982Multiple cross-site scripting (XSS) vulnerabilities in Yet A…
• CVE-2005-0983Quake 3 engine, as used in multiple games, allows remote att…
• CVE-2005-0984Buffer overflow in the G_Printf function in Star Wars Jedi K…
• CVE-2005-0985Unspecified vulnerability in the Mac OS X kernel before 10.3…
• CVE-2005-0987Unknown vulnerability in IRC Services NickServ LISTLINKS bef…
• CVE-2005-0988Race condition in gzip 1.2.4, 1.3.3, and earlier, when decom…
• CVE-2005-0989The find_replen function in jsstr.c in the Javascript engine…
• CVE-2005-0990unshar (unshar.c) in sharutils 4.2.1 allows local users to o…
• CVE-2005-0991RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure …
• CVE-2005-0992Cross-site scripting (XSS) vulnerability in index.php in php…