CVE

Id
4799  
CVE No.
CVE-2002-0407  
Status
Candidate  
Description
htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.  
Phase
Proposed (20020611)  
Votes
ACCEPT(4) Alderson, Baker, Cole, Frech | NOOP(3) Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24461 4799 CVE-2002-0407 BUGTRAQ:20020207 Re: KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service  View
24462 4799 CVE-2002-0407 URL:http://marc.info/?l=bugtraq&m=101310812804716&w=2  View
24463 4799 CVE-2002-0407 BUGTRAQ:20020402 KPMG-2002006: Lotus Domino Physical Path Revealed  View
24464 4799 CVE-2002-0407 URL:http://www.securityfocus.com/archive/1/265380  View
24465 4799 CVE-2002-0407 BID:4406  View
24466 4799 CVE-2002-0407 URL:http://www.securityfocus.com/bid/4406  View
24467 4799 CVE-2002-0407 XF:lotus-domino-reveal-information(8160)  View

Related JVN