CVE-2002-0245

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-05-29 · updated 2026-06-16

Description

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.

Affected products

Lotus Domino: 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.4a (+7)

References

http://marc.info/?l=bugtraq&m=101310812804716&w=2
http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F
http://www.iss.net/security_center/static/8160.php
http://www.securityfocus.com/bid/4049
http://marc.info/?l=bugtraq&m=101310812804716&w=2
http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F
http://www.iss.net/security_center/static/8160.php
http://www.securityfocus.com/bid/4049

Get alerted when CVE-2002-0245 or the next vulnerability affects your stack