[24961] in bugtraq

home help back first fref pref prev next nref lref last post

Re: KPMG-2002006: Lotus Domino Physical Path Revealed

daemon@ATHENA.MIT.EDU (Joe Testa)
Thu Apr 4 00:46:18 2002

Message-ID: <3CAA0F99.3050006@rit.edu>
Date: Tue, 02 Apr 2002 15:07:53 -0500
From: Joe Testa <jst3290@rit.edu>
MIME-Version: 1.0
To: =?ISO-8859-1?Q?Peter_Gr=FCndl?= <pgrundl@kpmg.dk>,
        bugtraq@securityfocus.com
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 > Vulnerable:
 > ===========
 > - Lotus Domino 5.0.9 on Windows 2000 Server
 > - Lotus Domino 5.0.9a on Windows 2000 Server
 > - Older versions were not tested, but are likely to be vulnerable


Confirmed on Windows NT 4.0 Server with Lotus Domino 4.6.2a:

Error 500
Execution of Perl script c:\notes\data\domino\cgi-bin\com5.pl failed. 
Error = 2

Lotus-Domino/Release-4.6.2a



    - Joe Testa


GPG key:  http://www.cs.rit.edu/~jst3290/joetesta_r7.pub
A22B 2683 C40E 5443 AE52  AD6D 65B2 F5DF 4B11 06B4

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8qg7+ZbL130sRBrQRAqGLAJ9tQmJ7cAwOfq6LbFd30HjmNtV7KQCeI+HW
zw0ybiwb64NFvBBFoBWtzS4=
=nc09
-----END PGP SIGNATURE-----




home help back first fref pref prev next nref lref last post