CVE-2002-0407: Medium severity lotus domino vulnerability
htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0407?
CVE-2002-0407 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2002-0407?
To fix CVE-2002-0407, update Lotus Domino server to a version later than 5.0.9a.
What type of attack is CVE-2002-0407 associated with?
CVE-2002-0407 is associated with remote information disclosure attacks that exploit specific requests.
Who is affected by CVE-2002-0407?
CVE-2002-0407 affects users of Lotus Domino server versions 5.0.9a and earlier.
What can attackers learn from exploiting CVE-2002-0407?
Exploiting CVE-2002-0407 allows attackers to determine the physical pathname of the server.