CVE-2002-0245 - Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physica

CVE-2002-0245

Summary

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.

References

Vulnerable Configurations

cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 18-10-2016 - 02:17)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4049
bugtraq	20020207 Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service
confirm	http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F
xf	lotus-domino-reveal-information(8160)

Last major update

18-10-2016 - 02:17

Published

29-05-2002 - 04:00

Last modified

18-10-2016 - 02:17