CVE-2002-0245
Published May 29, 2002
Last updated 8 years ago
Overview
- Description
- Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECFA202A-6B78-4378-B9C2-B13EBC443A3C"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB826C12-8B6E-4636-A6FC-90D47CCB706B"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A190AC8-E0AC-4CCF-8E5B-62F97633173A"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B990B6CA-8288-47E6-8D09-5F56FC844F24"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6A9DC42-4A06-4FA0-9E4A-2ABC52D1D083"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "748BF88E-D906-44D0-8B2C-7D734C76634E"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5C9CC25-44BD-4000-A5BD-62B55E9855D2"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F8C3E35-9D62-4E10-91AA-EFFC40A35918"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BF50283-F028-4FA7-95B6-829BF3BE32D0"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9F784ED-9EB5-4CBA-98BE-B6C78F5B66DC"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CCD6703-23A6-4BCC-BE57-C0D7FDB26E45"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80022584-A581-4DE2-9F2B-EC971F4D6DA3"
},
{
"criteria": "cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "468D4453-9607-4A74-908F-E5980DB3BDF8"
}
],
"operator": "OR"
}
]
}
]