Lotus Domino server 5.0.8 with NoBanner enabled allows remote malicious users to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
lotus domino 5.0.5 |
||
lotus domino 5.0.6 |
||
lotus domino 5.0.1 |
||
lotus domino 5.0.2 |
||
lotus domino 5.0.3 |
||
lotus domino 5.0.7a |
||
lotus domino 5.0.8 |
||
lotus domino 5.0.4 |
||
lotus domino 5.0.4a |
||
lotus domino 5.0.9 |
||
lotus domino 5.0 |
||
lotus domino 5.0.6a |
||
lotus domino 5.0.7 |
Vulmon