HTTP: Lotus Domino CSP Source Code Disclosure

This signature detects attempts to exploit a known vulnerability in Lotus Domino Web server. Lotus Domino versions 5 and 6 are vulnerable. Attackers can append characters to the end of the path in a URL request to the Web server daemon to return the source code of a Crystal Reports script (.csp). Attackers can use variations of this exploit to read the source code of other file types that the Web server daemon normally executes.

Extended Description

Remote attackers could exploit this vulnerability to obtain confidential information, such as user accounts, from a vulnerable server.

References

URL: http://securityvulns.com/docs4075.html

Short Name

HTTP:DOMINO:CSP-SRC-DISCLOSURE

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Lotus Domino CSP Source Code Disclosure

Extended Description

References

Found a potential security threat?