Vulnerability in Lotus Domino

CVE-2002-2191

Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.

EPSS: 0.029 (85.7th percentile) — read the EPSS interpretation.

Affected products

Lotus Domino — versions 5.0.8, 5.0.9, 5.0.9a
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, vdb-entry, x_refsource_XF)