GCVE-110-CERTCC-2001-657899

Advisory Published

Vulnetix · Advisory published September 17, 2001

Lotus Domino Servers 5.x, 4.6x, and 4.5x allow users to associate objects with documents in a database. While these objects appear to be a part of the document, they are actually stored as separate files. A vulnerability exist by which an intruder could view these objects regardless of the permissions set on the document to which they belong.

Download JSON Open in Console

Risk Scores

certcc-cam

impact4population5exploitation0widely_known20score_current1.40625ease_of_exploitation15

Aliases

CVE-2002-0037

References

Lotus Notes does not adequately secure databases thereby permitting arbitrary user to extract file attachments via NSFDbReadObject function call

advisory

Lotus Notes does not adequately secure databases thereby permitting arbitrary user to extract file attachments via NSFDbReadObject function call

url

Lotus Notes does not adequately secure databases thereby permitting arbitrary user to extract file attachments via NSFDbReadObject function call

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON