First published: Fri Dec 31 2004(Updated: )
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus Domino Mail Server | =6.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-2311 has been classified as a medium severity vulnerability.
To fix CVE-2004-2311, it is recommended to upgrade to a later version of IBM Lotus Domino that addresses the directory traversal vulnerability.
CVE-2004-2311 affects local users of IBM Lotus Domino version 6.5.1.
CVE-2004-2311 exploits a directory traversal vulnerability in the webadmin.nsf component of IBM Lotus Domino.
Yes, CVE-2004-2311 can potentially allow local users to create unauthorized folders or access sensitive files.