CVE-2007-1739

Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long, malformed DN request, which causes only the lower 16 bits of the string length to be used in memory allocation.

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=494Vendor Advisory
• http://secunia.com/advisories/24633Exploit, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21257248
• http://www.kb.cert.org/vuls/id/927988US Government Resource
• http://www.securityfocus.com/bid/23173
• http://www.securityfocus.com/bid/23174
• http://www.securitytracker.com/id?1017825
• http://www.vupen.com/english/advisories/2007/1133
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33278
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=494Vendor Advisory
• http://secunia.com/advisories/24633Exploit, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21257248
• http://www.kb.cert.org/vuls/id/927988US Government Resource
• http://www.securityfocus.com/bid/23173
• http://www.securityfocus.com/bid/23174
• http://www.securitytracker.com/id?1017825
• http://www.vupen.com/english/advisories/2007/1133
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33278

Published

Mar 28, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1733Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 al…
• CVE-2007-1734The DCCP support in the do_dccp_getsockopt function in net/d…
• CVE-2007-1735Stack-based buffer overflow in Corel WordPerfect Office X3 (…
• CVE-2007-1736Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) …
• CVE-2007-1737Opera 9.10 does not check URLs embedded in (1) object or (2)…
• CVE-2007-1738TrueCrypt 4.3, when installed setuid root, allows local user…
• CVE-2007-1740Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-1741Multiple race conditions in suexec in Apache HTTP Server (ht…
• CVE-2007-1742suexec in Apache HTTP Server (httpd) 2.2.3 uses a partial co…
• CVE-2007-1743suexec in Apache HTTP Server (httpd) 2.2.3 does not verify c…
• CVE-2007-1744Directory traversal vulnerability in the Shared Folders feat…
• CVE-2007-1745The chm_decompress_stream function in libclamav/chmunpack.c …