CVE-2001-1018: Medium severity lotus domino vulnerability
Published Sep 20, 2001
·Updated
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
Affected Software
1 affected component
Lotus Domino=5.0.8
Event History
Sep 20, 2001
CVE Published
04:00 AM
Feb 2, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1018?
CVE-2001-1018 is classified as a medium severity vulnerability.
2
How does CVE-2001-1018 work?
CVE-2001-1018 allows remote attackers to find out the internal IP address of a Lotus Domino server through a specially crafted GET request.
3
Who is affected by CVE-2001-1018?
CVE-2001-1018 affects users running Lotus Domino web server version 5.0.8.
4
How do I fix CVE-2001-1018?
To resolve CVE-2001-1018, it is recommended to upgrade to a more recent and secure version of Lotus Domino.
5
Is CVE-2001-1018 still a current threat?
While CVE-2001-1018 has been known for a long time, any systems still running vulnerable versions remain at risk.