PT-2001-2651 · Ibm · Lotus Domino Server

CVE-2001-1567

·

Published

2001-12-31

·

Updated

2016-10-18

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Lotus Domino server versions 5.0.9a and earlier
Description The issue allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
Recommendations For Lotus Domino server versions 5.0.9a and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2001-1567

Affected Products

Lotus Domino Server