Approved changes feed: RSS · Atom

cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*

part: a version: 5.0.8 update: *

VendorLotus (93607dda-9072-59fd-8625-14cb38673af3)
ProductDomino (3fcb20fb-318a-577f-86ef-4365f8bb3a6c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-2191 vulnerable 2026-06-08 04:47:19.332427 Details available
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-09-16T19:36:48.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0245 vulnerable 2026-06-08 04:46:21.046669 Details available
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:42:28.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1018 vulnerable 2026-06-08 04:45:21.281749 Details available
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:44:06.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0954 vulnerable 2026-06-08 04:45:21.146745 Details available
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-08T04:37:07.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0939 vulnerable 2026-06-08 04:45:21.123834 Details available
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:37:07.042Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0846 vulnerable 2026-06-08 04:45:20.917243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1203 vulnerable 2026-06-08 04:45:19.439020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.