Domino Server Security Vulnerabilities

CVE-2000-0021

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.

CVE-2000-0023

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.

CVE-2001-0009

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.

CVE-2003-1408

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.