CVE-2001-0846: Critical severity Lotus Domino vulnerability
Published Dec 6, 2001
·Updated
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).
Affected Software
14 affected components
Lotus Domino=5.0.6a
Lotus Domino=5.0.6
Lotus Domino=5.0.4
Lotus Domino=5.0.7a
Lotus Domino=5.0.1
Lotus Domino=5.0.2c
Lotus Domino=5.0.4a
Lotus Domino=5.0.3
Lotus Domino=5.0.2
Lotus Domino=5.0.2a
Lotus Domino=5.0.5
Lotus Domino=5.0.7
Lotus Domino=5.0
Lotus Domino=5.0.8
Event History
Dec 6, 2001
CVE Published
05:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0846?
CVE-2001-0846 is considered a critical vulnerability allowing unauthorized remote file access and arbitrary code execution.
2
How do I fix CVE-2001-0846?
To mitigate CVE-2001-0846, upgrade Lotus Domino to a version higher than 5.0.8 that contains the necessary security patches.
3
What are the affected versions of Lotus Domino for CVE-2001-0846?
CVE-2001-0846 affects Lotus Domino versions 5.0 through 5.0.8.
4
Can CVE-2001-0846 be exploited remotely?
Yes, CVE-2001-0846 can be exploited remotely by attackers without prior authentication.
5
What types of attacks can CVE-2001-0846 facilitate?
CVE-2001-0846 may facilitate attacks that involve unauthorized file reading and executing arbitrary code on the server.