Total vulnerabilities in the database
Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
| Software | From | Fixed in |
|---|---|---|
| lotus / domino | 5.0.6a | 5.0.6a.x |
| lotus / domino | 5.0.6 | 5.0.6.x |
| lotus / domino | 5.0.4 | 5.0.4.x |
| lotus / domino | 5.0.9 | 5.0.9.x |
| lotus / domino | 5.0.7a | 5.0.7a.x |
| lotus / domino | 5.0.1 | 5.0.1.x |
| lotus / domino | 5.0.4a | 5.0.4a.x |
| lotus / domino | 5.0.3 | 5.0.3.x |
| lotus / domino | 5.0.2 | 5.0.2.x |
| lotus / domino | 5.0.5 | 5.0.5.x |
| lotus / domino | 5.0.7 | 5.0.7.x |
| lotus / domino | 5.0 | 5.0.x |
| lotus / domino | 5.0.8 | 5.0.8.x |