How severe is CVE-2003-0178?

CVE-2003-0178 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2003-0178 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 15% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2003-0178?

CVE-2003-0178 affects Ibm Lotus Domino Web Server. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2003-0178?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2003-0178 published?

CVE-2003-0178 was published on 2003-04-02 and last updated on 2026-06-16.

CVE-2003-0178

CVE-2003-0178 is a critical-severity vulnerability in Ibm Lotus Domino Web Server with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 15% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 15% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ibm Lotus Domino Web Server
Published: 2003-04-02
Last modified: 2026-06-16

Description

Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.

Frequently asked questions

What is CVE-2003-0178?: Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
How severe is CVE-2003-0178?: CVE-2003-0178 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2003-0178 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 15% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2003-0178?: CVE-2003-0178 affects Ibm Lotus Domino Web Server. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2003-0178?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2003-0178 published?: CVE-2003-0178 was published on 2003-04-02 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:ibm:lotus_domino_web_server:6.0:*:*:*:*:*:*:*

More vulnerabilities in Ibm Lotus Domino Web Server

CVE-2007-0067 — High (CVSS 7.8): Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote…
CVE-2003-0179 — High (CVSS 7.5): Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute…
CVE-2003-0181 — Medium (CVSS 5.0): Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary…
CVE-2003-0180 — Medium (CVSS 5.0): Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete…
CVE-2008-2410 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus…

All CVEs affecting Ibm Lotus Domino Web Server →