Unrated severityNVD Advisory· Published May 29, 2002· Updated Apr 16, 2026
CVE-2002-0245
CVE-2002-0245
Description
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
Affected products
13cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.iss.net/security_center/static/8160.phpnvdPatchVendor Advisory
- marc.infonvd
- www-1.ibm.com/support/manager.wssnvd
- www.securityfocus.com/bid/4049nvd
News mentions
0No linked articles in our index yet.