CVE-2001-0954: Medium severity Lotus Domino vulnerability
Published Dec 7, 2001
·Updated
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
Affected Software
2 affected components
Lotus Domino=5.0.5
Lotus Domino=5.0.8
Event History
Dec 7, 2001
CVE Published
05:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0954?
CVE-2001-0954 is classified as a denial of service vulnerability.
2
How do I fix CVE-2001-0954?
To fix CVE-2001-0954, you should upgrade to a patched version of Lotus Domino beyond 5.0.8.
3
Which versions of Lotus Domino are affected by CVE-2001-0954?
Lotus Domino versions 5.0.5 and 5.0.8 are known to be affected by CVE-2001-0954.
4
What attack vector is used in CVE-2001-0954?
CVE-2001-0954 can be exploited via a specially crafted URL that includes a dot directory.
5
What impact does CVE-2001-0954 have on the server?
CVE-2001-0954 causes the server to block access to databases that have not been previously accessed.