Lotus Domino Default Administration Database Detection

Medium Nessus Network Monitor Plugin ID 2489

Synopsis

The remote host is vulnerable to a flaw that allows attackers to retrieve sensitive files or data.

Description

The remote Lotus Domino server is running with the default administrative databases. An attacker finding these databases may be able to pull confidential data from the remote database.

Solution

Restrict access to these databases.

See Also

http://www.lotus.com/developers/devbase.nsf/articles/doc1999112200

Plugin Details

Severity: Medium

ID: 2489

File Name: 2489.prm

Family: Database

Published: 2005/01/06

Modified: 2016/01/22

Dependencies: 1442

Nessus ID: 10629

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5

Temporal Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:H/RL:U/RC:C

CVSSv3

Base Score: 5.3

Temporal Score: 5.3

Vector: CVSS3#AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS3#E:H/RL:U/RC:C

Reference Information

CVE: CVE-2000-0022, CVE-2000-0023, CVE-2000-0021, CVE-2002-0664

BID: 5101, 881