CVE-2002-2191 — MEDIUM (5.0)

Vulnerability Description

Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Lotus	Domino	5.0.8

References

http://www.iss.net/security_center/static/10557.phpExploit
http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/6128Exploit
http://www.iss.net/security_center/static/10557.phpExploit
http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/6128Exploit

FAQ

What is CVE-2002-2191?

CVE-2002-2191 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-...

How severe is CVE-2002-2191?

CVE-2002-2191 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-2191?

Check the references section above for vendor advisories and patch information. Affected products include: Lotus Domino.