CVE

Id
6573  
CVE No.
CVE-2002-2191  
Status
Candidate  
Description
Lotus Domino 5.0.9a and earlier, even when configured with the "DominoNoBanner=1" option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
37247 6573 CVE-2002-2191 BUGTRAQ:20021107 Lotus Domino HTTP Server security issue  View
37248 6573 CVE-2002-2191 URL:http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2  View
37249 6573 CVE-2002-2191 XF:lotus-domino-version-disclosure(10557)  View
37250 6573 CVE-2002-2191 URL:http://www.iss.net/security_center/static/10557.php  View
37251 6573 CVE-2002-2191 BID:6128  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63947 JVNDB-2002-000274 IBM Lotus Domino HTTP Server の notes.ini ファイルにおける機密情報漏洩の脆弱性 IBM Lotus Domino HTTP Server には、notes.ini ファイルにおいて "DominoNoBanner=1" に設定し、バナー情報を出力しない設定にしていたとしてもバナー情報が漏洩してしまう脆弱性が存在します。 CVE-2002-2191 6573 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000274.html  View