First published: Thu Dec 06 2001(Updated: )
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Domino | =5.0.6a | |
IBM Lotus Domino | =5.0.6 | |
IBM Lotus Domino | =5.0.4 | |
IBM Lotus Domino | =5.0.7a | |
IBM Lotus Domino | =5.0.1 | |
IBM Lotus Domino | =5.0.2c | |
IBM Lotus Domino | =5.0.4a | |
IBM Lotus Domino | =5.0.3 | |
IBM Lotus Domino | =5.0.2 | |
IBM Lotus Domino | =5.0.2a | |
IBM Lotus Domino | =5.0.5 | |
IBM Lotus Domino | =5.0.7 | |
IBM Lotus Domino | =5.0 | |
IBM Lotus Domino | =5.0.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0846 is considered a critical vulnerability allowing unauthorized remote file access and arbitrary code execution.
To mitigate CVE-2001-0846, upgrade Lotus Domino to a version higher than 5.0.8 that contains the necessary security patches.
CVE-2001-0846 affects Lotus Domino versions 5.0 through 5.0.8.
Yes, CVE-2001-0846 can be exploited remotely by attackers without prior authentication.
CVE-2001-0846 may facilitate attacks that involve unauthorized file reading and executing arbitrary code on the server.