Approved changes feed: RSS · Atom

cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*

part: a version: 5.0.9 update: *

VendorLotus (93607dda-9072-59fd-8625-14cb38673af3)
ProductDomino (3fcb20fb-318a-577f-86ef-4365f8bb3a6c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-2191 vulnerable 2026-06-08 04:47:19.333050 Details available
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-09-16T19:36:48.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0245 vulnerable 2026-06-08 04:46:21.047194 Details available
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:42:28.652Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.