CVEvulnerability

CVE-2001-1567

5.0 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.

Affected configurations

• ibm lotus domino 5.0 • ibm lotus domino 5.0.1 • ibm lotus domino 5.0.2 • ibm lotus domino 5.0.3 • ibm lotus domino 5.0.4 • ibm lotus domino 5.0.5 • ibm lotus domino 5.0.6 • ibm lotus domino 5.0.7 • ibm lotus domino 5.0.7a • ibm lotus domino 5.0.8 • ibm lotus domino 5.0.9 • ibm lotus domino server (<= 5.0.9a)

Related

Referenced by CWE · observed example (2)

  • CWE-41 Improper Resolution of Path Equivalence weakness
  • CWE-48 Path Equivalence: 'file name' (Internal Whitespace) weakness

References