First published: Wed Dec 01 1999(Updated: )
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Domino Server | =4.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2000-0021 is considered to be medium, as it can potentially leak sensitive server information.
To fix CVE-2000-0021, upgrade to a later version of Lotus Domino Server that addresses this vulnerability.
CVE-2000-0021 can be exploited by attackers to gain insights into the server's file structure and paths.
CVE-2000-0021 specifically affects Lotus Domino Server version 4.6.
Mitigation measures include restricting access to the CGI-bin directory and implementing security policies to monitor abnormal requests.