Описание
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2001-1567
- http://marc.info/?l=bugtraq&m=101284222932568&w=2
- http://marc.info/?l=bugtraq&m=101285903120879&w=2
- http://marc.info/?l=bugtraq&m=101286525008089&w=2
- http://www.iss.net/security_center/static/8072.php
- http://www.nextgenss.com/papers/hpldws.pdf
- http://www.securityfocus.com/bid/4022
EPSS
CVE ID
Связанные уязвимости
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
EPSS