CVE-2001-1567

L

otus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.4:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.7:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.7a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:lotus_domino_server:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:38

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=101284222932568&w=2 - () http://marc.info/?l=bugtraq&m=101284222932568&w=2 -
References () http://marc.info/?l=bugtraq&m=101285903120879&w=2 - () http://marc.info/?l=bugtraq&m=101285903120879&w=2 -
References () http://marc.info/?l=bugtraq&m=101286525008089&w=2 - () http://marc.info/?l=bugtraq&m=101286525008089&w=2 -
References () http://www.iss.net/security_center/static/8072.php - () http://www.iss.net/security_center/static/8072.php -
References () http://www.nextgenss.com/papers/hpldws.pdf - Vendor Advisory () http://www.nextgenss.com/papers/hpldws.pdf - Vendor Advisory
References () http://www.securityfocus.com/bid/4022 - () http://www.securityfocus.com/bid/4022 -

Information

Published : 2001-12-31 05:00

Updated : 2025-04-03 01:03


NVD link : CVE-2001-1567

Mitre link : CVE-2001-1567

CVE.ORG link : CVE-2001-1567


JSON object : View