Lotus Domino < 5.0.12 / 6.0.1 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 1504

Synopsis

The remote host is running a version of the Domino web server which is vulnerable to various flaws when it acts as a web client (through web retriever) or in LDAP.

Description

The remote host is running a version of the Domino web server which is vulnerable to various flaws when it acts as a web client (through web retriever) or in LDAP. An attacker may use these flaws to execute arbitrary code on this host.

Solution

Upgrade to Domino 5.0.12, 6.0.1 or higher.

See Also

http://www.rapid7.com/advisories/R7-0011.html

http://www.rapid7.com/advisories/R7-0012.html

http://www.rapid7.com/advisories/R7-0011-info.html

http://www.rapid7.com/advisories/R7-0012-info.html

Plugin Details

Severity: High

ID: 1504

Family: Web Servers

Published: 2004/08/18

Modified: 2016/01/15

Dependencies: 1442

Nessus ID: 11338

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2003-0123, CVE-2001-1311

BID: 3041, 7038, 7039