5
CVE-2001-1567
- EPSS 1.56%
- Veröffentlicht 31.12.2001 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:56:31
- Erkennungen
LoginLotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Domino Version 5.0
Ibm ≫ Lotus Domino Version 5.0.1
Ibm ≫ Lotus Domino Version 5.0.2
Ibm ≫ Lotus Domino Version 5.0.3
Ibm ≫ Lotus Domino Version 5.0.4 Edition solaris
Ibm ≫ Lotus Domino Version 5.0.5
Ibm ≫ Lotus Domino Version 5.0.6
Ibm ≫ Lotus Domino Version 5.0.7 Edition solaris
Ibm ≫ Lotus Domino Version 5.0.7a
Ibm ≫ Lotus Domino Version 5.0.8
Ibm ≫ Lotus Domino Version 5.0.9
Ibm ≫ Lotus Domino Server Version <= 5.0.9a
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.56% | 0.72 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://marc.info/?l=bugtraq&m=101284222932568&w=2
http://marc.info/?l=bugtraq&m=101285903120879&w=2
http://marc.info/?l=bugtraq&m=101286525008089&w=2
http://www.iss.net/security_center/static/8072.php
http://www.nextgenss.com/papers/hpldws.pdf
http://www.securityfocus.com/bid/4022