CVE-2001-1161: High severity Lotus Domino R5 Server vulnerability

Published Jul 2, 2001

Updated

Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.

Affected Software

1 affected component

Lotus Domino R5 Server=5.0.6

Remediation

Patch Available

http://www.iss.net/security_center/static/6789.php

Event History

Jul 2, 2001

CVE Published

04:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1161?

CVE-2001-1161 is categorized as a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2001-1161?

To mitigate CVE-2001-1161, upgrade Lotus Domino to a version that is not affected by this vulnerability.

What software does CVE-2001-1161 affect?

CVE-2001-1161 specifically affects IBM Lotus Domino R5 Server version 5.0.6.

How does CVE-2001-1161 work?

CVE-2001-1161 allows remote attackers to execute JavaScript on client browsers through manipulated URLs.

What are the risks associated with CVE-2001-1161?

The main risk associated with CVE-2001-1161 is the exploitation of the cross-site scripting vulnerability to steal cookies or perform actions as the user.