Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
References
Configurations
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-01/0373.html - Exploit | |
References | () http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0258.html - Exploit | |
References | () http://www.iss.net/security_center/static/8038.php - | |
References | () http://www.securityfocus.com/bid/3991 - |
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-2014
Mitre link : CVE-2002-2014
CVE.ORG link : CVE-2002-2014
JSON object : View
Products Affected
ibm
- lotus_domino
CWE