Lotus Domino File Disclosure Vulnerability

Bugtraq ID:	3491
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 30 2001 12:00AM
Updated:	Oct 30 2001 12:00AM
Credit:	Discovered by David Litchfield <[email protected]>.
Vulnerable:	Lotus Domino 5.0.8 Lotus Domino 5.0.7 a Lotus Domino 5.0.7 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.6 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.5 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.4 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.3 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.2 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0.1 - HP HP-UX 9.9 - HP HP-UX 9.9 - IBM AIX 4.3 - IBM AIX 4.3 - IBM OS/2 4.5 Warp - IBM OS/2 4.5 Warp - IBM OS/390 V2R9 - IBM OS/390 V2R9 - Linux kernel 2.3 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc Lotus Domino 5.0
Not Vulnerable:

Lotus Domino File Disclosure Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Lotus Domino File Disclosure Vulnerability

References:

• Lotus Domino Product Homepage (IBM)